last executing test programs:

1m38.939419736s ago: executing program 1 (id=355):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000100)=0xfffffffa, 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbb0180c200000386dd6d002000006488ff00000000000000000000000000000000ff0200000000000000000000000000014f194e20004d90"], 0x9e)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2e, &(0x7f0000000040)=0xffffffdd, 0x4)
pipe(&(0x7f0000000080))
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
r4 = socket(0x10, 0x3, 0x0)
write(r4, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0), 0x4)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r7 = accept$alg(r6, 0x0, 0x0)
sendmsg$alg(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0)
write$binfmt_script(r7, &(0x7f0000000600), 0xfec8)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010003020000082505a1a440000102030109025c000201c92d020904000001020d0000052407000105240008000d240f0109000000030080000306"], &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0})
recvmmsg(r7, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xfffffffffffffe24}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680})
creat(&(0x7f0000000080)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r8 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix={0x0, 0x0, 0x35315842}})

1m37.436223188s ago: executing program 1 (id=357):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0011000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000004560100008e0100006f776e657200000000000000000000000000000000000000db21b519bf83d1fb180000000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02040000000000004e464c4f4700000000000000000000000000000000000000000000000000000050000000000000000100000007000300000000005cae641872319dfae5a988272763a36abcf1f74cfd4bf988531a30a528c1c044813d8205fd8b1fdf1c2ccd79b5fb7f9e096fbd1c7eeee4b6646c0b2fc39d3fe20000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x296)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f00000000c0)=""/59, 0x304000, 0x1000, 0x0, 0x3}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000180)={'gre0\x00', <r3=>0x0, 0x20, 0x80, 0x63f, 0x7, {{0x17, 0x4, 0x0, 0x1c, 0x5c, 0x65, 0x0, 0xf2, 0x29, 0x0, @broadcast, @local, {[@rr={0x7, 0xb, 0x26, [@loopback, @multicast1]}, @timestamp_addr={0x44, 0x34, 0xe9, 0x1, 0x1, [{@rand_addr=0x64010102, 0x117}, {@dev={0xac, 0x14, 0x14, 0x3d}}, {@broadcast, 0x8}, {@private=0xa010101, 0x8}, {@broadcast, 0x8001}, {@multicast1, 0x214e}]}, @generic={0x82, 0x6, "3fba5600"}]}}}}})
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil)
bind$bt_l2cap(r4, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x7, 0x40010, r4, 0x29bda000)
bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x1, r3, 0x1f, r2}, 0x10)
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})

1m37.425842952s ago: executing program 1 (id=358):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}], 0x1}}], 0x1, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000840)=""/4085, 0xff5}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000000140)=""/153, 0x99}, {&(0x7f0000001880)=""/134, 0x86}], 0x4}, 0x20)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x3c0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="380000000000000029000000360000001103000000000000c910fc0100"], 0x38}}], 0x2, 0x810)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000009, 0x4008031, 0xffffffffffffffff, 0x9ec5b000)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e1e, 0x0, @loopback, 0x2}, 0x1c)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x14, r6, 0x601}, 0x14}}, 0xc000)
r7 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b3ed5539b2d1acd76fcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0))

1m36.796753382s ago: executing program 1 (id=360):
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000280)='./file1\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
socket$inet6(0xa, 0x2, 0x0) (async)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000080)=0x1ff, 0x4)
connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x3}, 0x8000005, 0x2}, 0x20)
sendmmsg$inet6(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="0000000018"], 0x40, 0x7ffffff7}}], 0x1, 0x4880)
keyctl$set_reqkey_keyring(0xe, 0x4)
mknod$loop(&(0x7f0000000240)='./file0\x00', 0x6000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001b000))
ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x34041, 0x0) (async)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x34041, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
userfaultfd(0x1) (async)
r3 = userfaultfd(0x1)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) (async)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (async)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f00005e9000/0x3000)=nil, 0x3000})
ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r1, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'team_slave_1\x00'})
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000004c0))

1m36.63715126s ago: executing program 1 (id=361):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x28000, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10240, 0x0)
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000140)={0x28, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)="eb43"})

1m36.333920393s ago: executing program 1 (id=362):
syz_init_net_socket$x25(0x9, 0x5, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x4200, 0x0)
ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
accept4$x25(r1, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000000080)=0x12, 0x80800)
ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9)

1m36.070797535s ago: executing program 32 (id=362):
syz_init_net_socket$x25(0x9, 0x5, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x4200, 0x0)
ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
accept4$x25(r1, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000000080)=0x12, 0x80800)
ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9)

23.522252144s ago: executing program 3 (id=754):
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {<r1=>0x0, <r2=>0x0}}, './file0\x00'})
statx(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r1, r4)
r5 = open_tree(r0, &(0x7f00000001c0)='./file0\x00', 0x80800)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x900, 0x4c)
mknodat$null(r6, &(0x7f0000000240)='./file0\x00', 0x200, 0x103)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
r9 = getpgid(0x0)
sendmsg$netlink(r7, &(0x7f00000007c0)={&(0x7f0000000280), 0xc, &(0x7f00000006c0)=[{&(0x7f00000002c0)={0x390, 0x25, 0x202, 0x70bd28, 0x25dfdbfd, "", [@typed={0x8, 0x7d, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="4997acbad93db784572b2f63f4bd537ea38f3843804fcf05e12a20c8ab73cf901b7c0aa61994e64e7f264d54776c827c23935be02089aba6559e3be354a91d0e9948b013621f715d3c45835cb4e8a0f6a8528b7132037fd970acaf1657df2f7a76444ac171e0b88de5db580cc24239bd00e215aafb42637bb986b395794d58a40cf5b9d7916ffa503977567c1ed04ac2102b162150eed72bebb75efcdba26c069a721f3cc2541311f7d445bd8fd6", @generic="bb0d5a7960710b60db58cf4ad953f4fbd7e1fb907300bb085612eaadbafb33dbfeac95de1432b1bc1b95b03aa0702a84c204d02d7a6a0c48b9bf7adb78a0b2f8be146977b3634a01d7bbf92b443b2ac6d799add4b103e3b2fc3bc2517ca35a8250bf1f8d35954d82", @nested={0xcc, 0x70, 0x0, 0x1, [@nested={0x4, 0xb8}, @generic="f61b6e673971b962fb46e6bed4bd1296298468646aa98f36e15367436072b82d1287613923ebfa37a702e7fbd8e0c8f5a09e58bddd7bca48dc574b121461349fcde6baa523ef061d8033ff7d45e87aaa318eb749af839bf23d24d3b7b886d4d998c921facc16da574c3fd3c53aa8604d6746ee440c4256266c6cc62ec90ff770f53e33a60074f8c76525901853178004641541876c1eb06592c54a2cb43a40dbe1a78455bb775e04715a8efe845e9b8555b072f8ede5358e", @typed={0xc, 0x10, 0x0, 0x0, @u64=0x5}]}, @generic="8c3596b4bf2bc0b5f2efa474bc87166651a760e223a5ba7cfe56d0f801df1834ca0141eb6ea7be4d608c2c3c7371096207b04b25df1bdef43c385ca7d543219673b0f366c40ce6dfeadecdaf5097395c11fcd270f048d1c8f1f2a90a65e8ebc418bd7a162a9a9bbf3b797b6f013821ed28c2bfa6ea1087ca1ba22fde3e46e77ba0f3a2165372f7a081fa697cd68a511762ef0522d6d591cef0c551ce", @generic="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"]}, 0x390}, {&(0x7f0000000680)={0x18, 0x41, 0x10, 0x21f, 0x25dfdbfd, "", [@nested={0x8, 0x151, 0x0, 0x1, [@nested={0x4, 0x4c}]}]}, 0x18}], 0x2, &(0x7f0000000700)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x30, 0x1, 0x1, [r6, r6, r5, r0, 0xffffffffffffffff, r8, r5, r6]}}, @rights={{0x28, 0x1, 0x1, [r6, r0, r5, r0, r6, r5]}}, @cred={{0x1c, 0x1, 0x2, {r9, r1, r4}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r3, r2}}}], 0xb0, 0x4001}, 0x24000000)
creat(&(0x7f0000000800)='./file0\x00', 0x11)
syz_usb_connect$uac1(0x0, 0xde, &(0x7f0000000840)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcc, 0x3, 0x1, 0xf, 0x0, 0xe3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x64fa, 0x40}, [@selector_unit={0x6, 0x24, 0x5, 0x6, 0x0, "1f"}, @feature_unit={0x9, 0x24, 0x6, 0x4, 0x1, 0x1, [0x7], 0x9}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x304, 0x6, 0x1, 0xf}, @selector_unit={0x8, 0x24, 0x5, 0x1, 0x0, "a28b42"}, @mixer_unit={0x6, 0x24, 0x4, 0x4, 0x7, 'D'}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x206, 0x1, 0x9, 0x1, 0x8, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x2, 0x3, 0x6}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x5, 0x8, "cbc94278"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x5864, 0x3, 0x1, "2247ab6534"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xe, 0x2, 0x1, {0x7, 0x25, 0x1, 0x2, 0x7f, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x4, 0x1, 0x5, 0xc, "1f3d2b2d"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x24, 0x1, 0x18, 0x7, "4ea02b4986"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x2, 0x9, 0x2, {0x7, 0x25, 0x1, 0x2, 0x4, 0x4d3}}}}}}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x200, 0x9, 0x3, 0x1, 0xff, 0x4}, 0x10, &(0x7f0000000980)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x8, 0xef, 0x5, 0x8, 0x8}]}, 0x8, [{0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x9b, &(0x7f0000000a40)=@string={0x9b, 0x3, "5af1c915c2de16279b0952da0eccc13acb9add58b331aa34f7a11a7d18d67d978f2f3e164d296c6d2c3858ea2f3456a7c27a5fb26bb592831d926b8e7ee14fc8bd94d0272dd47c59246a7da2743f55e29b1498bfc05cd8cf35988f51b6c79bbeb2aa19201d10c51cded26bfaf248e0817d841dde5a36e2f205b0a57d53df6d0dbea40066045902161efafca21213db840bb0b53980e4115186"}}, {0xe2, &(0x7f0000000b00)=@string={0xe2, 0x3, "5e8fe904a4073ce83f7b9504946075af99df1c33d310fbfc507cc2c598056b1a3ed590b7faffe04f75318b9e60f6b845cc0f24b9773a04971fad2649298d815dd09d4332fe92b204e1457689452f53212a734015debaf9bccb5ad331be926f7f56d3ebee40d73451ce70d6baad65727433b7fa2f46d350d422e8d4901a395781dd345c446bf015c76c77532d5a95f32a65dd17effa336a271d55b203358a74fa8473fc1d78c9e5fd276b43fe838f9d58144be03d4690110d7580d824d6fa20874592c2b659838b8a9f519b16606cf8819ea6a7bf412840d9f0beedab2e141c3a"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x1809}}, {0xc6, &(0x7f0000000c80)=@string={0xc6, 0x3, "d8d00a8acb51ea0c76b14d4320376b4dc3bc67b47f5179473579a9ec47f2d34d2fc650e291320819989c2b3a42ca04efe04a9d65f498021b8da7f0bc152271cbb7df069253597ffb5e35b36edf8f4df3e4e5a635a9f7d9ae68fbc6747213a3636d767a08f64b981c0b3bb6267e4c6fb84c8ad9d0c023e6acbaa0b0f860400ef3e7c445428f69734ef607a71c521a527264b3f96b45e5b2857e9d0953eeebfd9a88704290a9e7685df48066b76976ea5dd8308fe5afd54a7a1147f82c1e2e79b40b6f83ee"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x437}}]})
r10 = open$dir(&(0x7f0000000e40)='./file0\x00', 0x40000, 0x22)
mkdirat(r10, &(0x7f0000000e80)='./file0\x00', 0x10)
read$FUSE(r0, &(0x7f0000000ec0)={0x2020}, 0x2020)
readlinkat(r0, &(0x7f0000002f00)='./file0\x00', &(0x7f0000002f40)=""/184, 0xb8)
r11 = socket$inet6(0xa, 0x3, 0x2)
connect$inet6(r11, &(0x7f0000003000)={0xa, 0x4e22, 0x5, @local, 0x1}, 0x1c)
accept4$unix(r5, &(0x7f0000003040)=@abs, &(0x7f00000030c0)=0x6e, 0x80000)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000003100)=@md0, r3, &(0x7f0000003140)='./file0\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000031c0)={0x7, &(0x7f0000003180)=[{0x2, 0x1, 0x7, 0x8000}, {0x9, 0x6, 0xc, 0x9}, {0xd, 0x3, 0xf9, 0x12afb32a}, {0x7, 0x3, 0x27, 0x8}, {0xee, 0x8, 0x1, 0x8}, {0xe, 0x0, 0xff, 0xaf}, {0x14d, 0x3, 0x1, 0x2}]})
ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000003300)={0x8, 0x3, &(0x7f0000003200)=[0x0, 0x0, 0x0], &(0x7f0000003240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003280)=[0x0, 0x0], &(0x7f00000032c0)=[0x0, 0x0, 0x0, 0x0, 0x0]})
r12 = accept$phonet_pipe(r0, &(0x7f0000003340), &(0x7f0000003380)=0x10)
connect$phonet_pipe(r12, &(0x7f00000033c0)={0x23, 0x2}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000003400)={{0x1, 0x1, 0x18, <r13=>r10, {<r14=>r10}}, './file0\x00'})
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000003440)=<r15=>0x0)
bind(0xffffffffffffffff, &(0x7f0000003480)=@nfc={0x27, r15, 0x1, 0x5}, 0x80)
write$tun(r14, &(0x7f0000003500)={@void, @val={0x3, 0x80, 0x0, 0x8, 0x5c1e, 0x1}, @ipv4=@dccp={{0xe, 0x4, 0x0, 0x0, 0xa4, 0x68, 0x0, 0x6, 0x21, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x1c}, {[@rr={0x7, 0xb, 0x76, [@loopback, @private=0xa010101]}, @end, @timestamp={0x44, 0x14, 0xc3, 0x0, 0x0, [0x4, 0xb6, 0x7, 0x1b8]}, @noop, @rr={0x7, 0x3, 0x38}]}}, {{0x4e20, 0x4e24, 0x4, 0x1, 0x4, 0x0, 0x0, 0x8, 0x1, "e9b276", 0x8, "e38ebe"}, "78520caed9c575db34d07ad90f554eac73f18db803799d8d268b2a00eea67ffec3fa3f57cd4c426854d191a3f5c8bff939f4970ce3843b98f48a61e21d0a623374c1a37acd0abd1caafd9b2cdb0943abef7ce5baa24173c8c8176e46"}}}, 0xae)
fchownat(r10, &(0x7f00000035c0)='./file0\x00', r1, r2, 0x400)
quotactl_fd$Q_SETINFO(r13, 0xffffffff80000600, r1, &(0x7f0000003600)={0xa, 0x8, 0x1, 0x4})

22.788269316s ago: executing program 3 (id=757):
getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000000)={'broute\x00', 0x0, 0x0, 0x0, [0x1, 0x5, 0x7b3, 0x8a0f, 0x7fff, 0x1fb]}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a00", 0x36}], 0x1}, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) (async)
ioperm(0x1, 0x3, 0x163f) (async)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x11, r3) (async)
ptrace$getregset(0x4204, r3, 0x201, &(0x7f00000001c0)={0x0}) (async)
ptrace$ARCH_GET_UNTAG_MASK(0x1e, r3, &(0x7f0000001b00), 0x4001) (async)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="0f08b9820400000f32b805000000b9050000000f01d966ba410066ed0fa80f01c40fc72a36f4c4e2fd40db66ba6100b83e9f0000ef", 0x35}], 0x0, 0x2c, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x4f, 0x0, 0x0)
r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000980)})
ioctl$KVM_GET_SREGS2(r4, 0x8140aecc, &(0x7f0000000380))
memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x86)
fchdir(r7) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) (async)
symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00')
mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async)
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') (async)
openat2(0xffffffffffffffff, &(0x7f0000001b40)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000002b40)={0x10100, 0x21, 0x13}, 0x18) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r5)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080))

22.56845691s ago: executing program 3 (id=758):
bind$isdn(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @local=@item_4={0x3, 0x2, 0x2, "4e84a66b"}, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_012={0x1, 0x1, 0x7, '8'}, @main=@item_4={0x3, 0x0, 0x8, "c83e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dde84050"}, @local=@item_012={0x2, 0x2, 0x3, '\fh'}, @main=@item_4={0x3, 0x0, 0x9, ')$Q)'}]}}, 0x0}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50)
pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x4fed0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)
ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0)

21.968734776s ago: executing program 3 (id=760):
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64)
socket$key(0xf, 0x3, 0x2) (async)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) (async)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) (async)
socket$igmp(0x2, 0x3, 0x2) (async)
r1 = creat(&(0x7f0000001380)='./file0\x00', 0x12c) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xd, 0x20000)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x6, 0x6, 0x448, 'syz0\x00', 0x3}, 0x1, [0x7, 0xd5, 0x2, 0xfff, 0xb, 0x6, 0x2, 0x401, 0x2, 0x1, 0x7f, 0x102d, 0x8, 0x1, 0x3, 0x1, 0x7f, 0x7, 0x6, 0x200, 0x80, 0x4000000000007, 0x6e45109f, 0x4000000000007, 0x8, 0x2, 0x0, 0x7, 0xfffffffffffffffd, 0x3, 0x100000001, 0x403, 0x1, 0x8, 0x101, 0x3, 0x4, 0x15f, 0x1, 0x1da5, 0x9, 0x4, 0x8a, 0x50f, 0x9ac2, 0x6fe5, 0xffffffffba36ba5a, 0x7, 0x1, 0x88a, 0x6, 0x6, 0xffffffffffffffff, 0x400, 0x3, 0x3, 0x2, 0xfffffffffffffff9, 0x0, 0xf9800000, 0x0, 0x5, 0x4, 0x9, 0x82d, 0x3, 0x6, 0x0, 0x9, 0x3, 0x3ff, 0x6, 0xff, 0x2f, 0x1, 0x7, 0x411, 0x2, 0x42843379, 0x1, 0x7, 0x5, 0x77a, 0x6997, 0x4000000007, 0x539, 0x623a, 0x6, 0x0, 0x6, 0x9, 0x9d8e, 0x7, 0x7ff, 0x40000000, 0x5, 0x93, 0x7, 0x80, 0x2, 0x2775e12f, 0x680000000000, 0x5, 0x8000007, 0x9, 0x80000004, 0xfffffffffffffffd, 0xfffffffffffffffa, 0x10001, 0x8, 0x8, 0x5, 0x801, 0x5, 0x0, 0xfffffffffffff000, 0x10000, 0x7fff, 0xfffffffffffffff9, 0x6, 0x46b, 0x7, 0x5, 0x6, 0x7, 0x2, 0x7f, 0x63a]})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
pipe(&(0x7f00000001c0))
socket$nl_rdma(0x10, 0x3, 0x14) (async)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0) (async)
syz_usb_control_io(r3, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000200)={0x0, 0x14, 0x37, "0da5c46c571650bb13a07000aa01114c057fae3630382b44dcba854c528a8c465671f4a9eeadad5e18416d8c167869bdecf1e57ff6dd92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0/file0', [{0x20, '/dev/snd/controlC#\x00'}, {}], 0xa, "57c4568427c4e0100da0597ca5bba08766ce49faa2da18ea10cddcb1"}, 0x42) (rerun: 64)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r4, @ANYRES16=r5], 0xc4}, 0x1, 0x0, 0x0, 0x8010}, 0x0)

21.863128337s ago: executing program 3 (id=762):
syz_open_dev$sg(&(0x7f0000000080), 0x9, 0x1)
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x248}, 0x1, 0x0, 0x0, 0x4010}, 0x800) (async)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x232}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2", 0x12}, {&(0x7f00000006c0)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615fca9879b11834eb07eeb4278cab057f89b7464048cf573c21df5435e3b81aaba048fa4264d4c15513c91e9230a8e4b", 0xcd}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) (async, rerun: 64)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="010329bdbaeba319407000fcdbdf"], 0x14}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r1=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000a40)={'syztnl0\x00', <r2=>0x0, 0x1, 0x20, 0x8, 0x9, {{0x10, 0x4, 0x3, 0x9, 0x40, 0x66, 0x0, 0x9, 0x4, 0x0, @multicast1, @empty, {[@ssrr={0x89, 0x17, 0xfe, [@empty, @local, @multicast2, @remote, @multicast2]}, @end, @lsrr={0x83, 0x7, 0xa4, [@empty]}, @ra={0x94, 0x4}, @rr={0x7, 0x7, 0x34, [@remote]}]}}}}}) (async)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f0000000180)="10030600e0ff020004004788aa96a13b", 0x10, 0x0, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, 0x14) (async)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000ac0)=0x14) (async)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000b00)={<r6=>0x0, @private, @dev}, &(0x7f0000000b40)=0xc) (async)
r7 = socket$packet(0x11, 0x2, 0x300)
r8 = socket$packet(0x11, 0x2, 0x300) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'vlan0\x00', <r9=>0x0})
sendto$packet(r8, &(0x7f0000000380)="029a8bff7a", 0x5, 0x4004, &(0x7f0000000200)={0x11, 0x8100, r9, 0x1, 0xe0}, 0x14) (async)
r10 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r11=>0x0})
sendto$packet(r10, 0x0, 0x0, 0x10000b01, &(0x7f0000000080)={0x11, 0x4305, r11, 0x1, 0x0, 0x6, @random="971c5f00"}, 0x14) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000bc0)={'tunl0\x00', &(0x7f0000000b80)={'tunl0\x00', <r12=>0x0, 0x40, 0x80, 0x2, 0x4, {{0x6, 0x4, 0x3, 0xd, 0x18, 0x65, 0x0, 0x6, 0x0, 0x0, @remote, @remote, {[@ra={0x94, 0x4}]}}}}})
r13 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
r14 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r14, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'erspan0\x00', <r15=>0x0}) (rerun: 32)
sendto$packet(r14, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r15, 0x1, 0x0, 0x6, @multicast}, 0x14) (async)
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c00)=ANY=[@ANYBLOB="64010000", @ANYRES16=r0, @ANYBLOB="00012bbd7000ffdbdf25090000003800018008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d3672656731000000000000000008000300010000003c00018008000300020000000800030002000000140002007369743000000000000000000000000014000200776c616e3100000000000000000000001c00018008000100", @ANYRES32=r4, @ANYBLOB="080003000700000008000300030000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=r5, @ANYBLOB="40000180140002006361696630000000000000000000000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="080003000200000018000100", @ANYRES32=r11, @ANYBLOB="08000300010000001400018008000100", @ANYRES32=r12, @ANYBLOB="08000300a86903bb28000180080003000000000008000300030000001400020069703667726530000000000000000000280001800800030001000000140002007665746831000000000000000000000008000100", @ANYRES32=r15, @ANYBLOB], 0x164}, 0x1, 0x0, 0x0, 0x4001}, 0xc0)
r16 = socket(0x10, 0x803, 0x0)
sendto(r16, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async)
recvmmsg(r16, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x66}, {&(0x7f0000000280)=""/76, 0x4c}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/92, 0x5c}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})

21.704172549s ago: executing program 3 (id=764):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000380)={{0x0, 0x400, 0x4b, 0x9}, 'syz0\x00', 0x11})
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x1412, 0x1, 0x70bd28, 0x25dfdbfc}, 0x10}}, 0x20000000)
close_range(r0, 0xffffffffffffffff, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0xa703, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r6=>0xffffffffffffffff})
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$sock_int(r7, 0x1, 0x2f, 0x0, &(0x7f0000000240)=0x700)
pipe2$9p(&(0x7f00000001c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_9p2000}]}})
write$P9_RVERSION(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r8, @ANYRESHEX=r9], 0x15)
ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0xc0205647, &(0x7f0000000240)=0x1)
r10 = dup(r4)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r3, &(0x7f0000000200)={@val={0x0, 0x8847}, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "5421bd", 0x20, 0x3c, 0xff, @empty, @mcast2, {[@dstopts={0x1, 0x3, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @jumbo={0xc2, 0x4, 0x6}]}]}}}}}}, 0x5a)
mkdir(&(0x7f0000000300)='./bus\x00', 0x120)
lsetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='trusted.overlay.origin\x00', &(0x7f0000000400)='\xcag\b\x1e_\x11+\xed\x8a\xb4Ae\x92\xa55m\xa9m\xb4\x81P\xea\xe0\x04\x00\x00\x00o\xe6\\#\x9a@\x02/\x00'/48, 0x30, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}, {@metacopy_off}]})

11.572272287s ago: executing program 4 (id=807):
r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 32)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r1, &(0x7f0000000f00)=ANY=[@ANYBLOB="000086dd0000110000080000000060ec970000382900fe800000000000000000dfffffff00aaff020000000000000000000000000001"], 0x6e) (async)
r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) (async)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001140)=ANY=[@ANYBLOB="440300001100010226bd7000fcdbdf2564010100000000000000000000000000000004d20a0032"], 0x344}, 0x1, 0x0, 0x0, 0x40884}, 0x0) (async)
sendmsg$tipc(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="a2", 0xfffffd2a}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000041)
close(r6) (async)
close(r5) (async)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc) (async)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10)
connect$pppl2tp(r8, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x204, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) (async)
sendfile(r8, r3, 0x0, 0x80001d00c0d0) (async, rerun: 64)
ioctl$SNDCTL_SYNTH_ID(r3, 0xc08c5114, &(0x7f0000000000)={"ee3fc265ac9240e26a152ea2677a0d15b114cb5f85b7563b62b13b0289d4", 0xd068, 0x0, 0x1, 0x0, 0x8, 0x6, 0x0, 0x4, [0x0, 0x7, 0x75, 0x80000001, 0x4, 0xd2fc, 0x2, 0x4, 0x54280abb, 0x10000, 0x3, 0x7, 0x7fff, 0x1, 0x4000, 0x2, 0x503a, 0x6, 0x2]}) (rerun: 64)
sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="28000000110001130000002f6465760000000000000000642300"/40], 0x28}], 0x1}, 0x0)

11.348531489s ago: executing program 4 (id=808):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local})
syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xb, 0x2, 0x40, 0x1, 0x7, 0x8}, {0x9, 0x5, 0x9, 0x2, 0x200, 0x9, 0x1, 0x8}, {0x9, 0x5, 0x0, 0x3, 0x410, 0x7f, 0x1, 0x4}}}}}}]}}, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, 0x0)

10.052438861s ago: executing program 4 (id=811):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43af5fe80000000000000000000003a000010ff02000000000000000000000000000189"], 0x340a)

9.888884386s ago: executing program 4 (id=813):
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x3, 0x400, 0xffffffff}) (async)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x300}}) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x0, 0x6, 0xfffffffffffffffe, 0x9, 0x7, 0xb, 0x651, 0xfffffffffffffffc, 0x9657, 0x0, 0x7fffffff, 0x0, 0x8, 0xb, 0x80000000000000, 0xcc0, 0x1, 0x1, 0x94d6, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffa, 0x3, 0x2000000000000}) (async)
shutdown(r0, 0x0) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002700)={{{@in=@empty, @in=@broadcast, 0x4e22, 0xfffb, 0x4e1d, 0x1, 0x2, 0x20, 0xa0, 0x62}, {0xfffffffffffeffff, 0x7, 0x0, 0x5, 0x7fff, 0x7, 0xfff, 0x70}, {0x8, 0x3, 0x8, 0x2cc}, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x4d5, 0x32}, 0x2, @in=@loopback, 0x0, 0x4, 0x0, 0xf8, 0x6, 0x1006, 0x7ff}}, 0xe8) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={<r1=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x5b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c010}, 0xc010) (async)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)

7.431301863s ago: executing program 0 (id=823):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x20040855}, 0x4000000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000100001000000000000ffffffec00000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000)

7.419165474s ago: executing program 0 (id=824):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r4 = accept4(r3, 0x0, 0x0, 0x80000)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r4)
r5 = dup(r1)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CAP_DISABLE_QUIRKS(r7, 0xc040aed4, 0x0)
write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00006005000000000000aaaaaaaaaabb81"], 0x4f)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff00092406050602010000092403000303000549"], 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000100)={0x28, 0x3, r8, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7180})

6.749015321s ago: executing program 4 (id=826):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, &(0x7f00000003c0)={0x14, 0x0, 0x0}, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, r2, 0x230d}, 0xc)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4)
syz_usb_control_io(r0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

5.859938013s ago: executing program 33 (id=764):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000380)={{0x0, 0x400, 0x4b, 0x9}, 'syz0\x00', 0x11})
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x1412, 0x1, 0x70bd28, 0x25dfdbfc}, 0x10}}, 0x20000000)
close_range(r0, 0xffffffffffffffff, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0xa703, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r6=>0xffffffffffffffff})
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$sock_int(r7, 0x1, 0x2f, 0x0, &(0x7f0000000240)=0x700)
pipe2$9p(&(0x7f00000001c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_9p2000}]}})
write$P9_RVERSION(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r8, @ANYRESHEX=r9], 0x15)
ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0xc0205647, &(0x7f0000000240)=0x1)
r10 = dup(r4)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r3, &(0x7f0000000200)={@val={0x0, 0x8847}, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "5421bd", 0x20, 0x3c, 0xff, @empty, @mcast2, {[@dstopts={0x1, 0x3, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @jumbo={0xc2, 0x4, 0x6}]}]}}}}}}, 0x5a)
mkdir(&(0x7f0000000300)='./bus\x00', 0x120)
lsetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='trusted.overlay.origin\x00', &(0x7f0000000400)='\xcag\b\x1e_\x11+\xed\x8a\xb4Ae\x92\xa55m\xa9m\xb4\x81P\xea\xe0\x04\x00\x00\x00o\xe6\\#\x9a@\x02/\x00'/48, 0x30, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}, {@metacopy_off}]})

5.546049114s ago: executing program 2 (id=829):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x40010, r3, 0xfffff000)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r4 = dup3(r2, r1, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x88901, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r8 = syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$x86(r8, &(0x7f0000000000)={0x0, 0x0})
ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000000040))
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_SET_CPUID(r9, 0x4008ae8a, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f40)=ANY=[@ANYBLOB="2801000017000100fefffffb000000000a0100ff0000000000000000000000000000000000000000ffffffff00000000000000000000000020010000000000000000000000000001ff02000000000000000000000000000100000000000000000200008084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000000000000000000000000f0ddff0000000000001000040200002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000040000000000000000000008000000000900000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000a0000000000000009000000ba6b6e000100000000000000000400"/128], 0x128}}, 0x0)
r10 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r10, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000002c0)={0x4, 0x0, [{0xc0000001, 0x71cd, 0x10000, 0x7ff, 0x7}, {0x4, 0x401, 0xfffffffc, 0x100, 0x34}, {0x0, 0x100, 0xc8, 0x1, 0x7fff}, {0x80000007, 0x2, 0x101, 0x9, 0x3}]})
r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r11, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
connect$inet6(r11, &(0x7f0000000100)={0xa, 0x4e60, 0x0, @mcast2, 0xd}, 0x1c)
sendmmsg$inet6(r11, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000280)="ca701a", 0x3}, {&(0x7f0000000240)="927b", 0x2}], 0x3}}], 0x1, 0x4400c800)

5.083928607s ago: executing program 2 (id=830):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43af5fe80000000000000000000008d000010ff02000000000000000000000000000189"], 0x340a)

4.768138288s ago: executing program 2 (id=831):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10)
close_range(r3, 0xffffffffffffffff, 0x10000000000000)
connect$can_bcm(r2, &(0x7f0000000000), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', <r5=>0x0})
sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r5}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d6fe682c6100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000540)={'vxcan1\x00', <r6=>0x0})
sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r6, 0x0, 0x4000}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0xf8, r7, 0x1, 0x70bd29, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0xd0, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @private0, 0x157}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "105850071e2ab631bd00cf795354cb2c626d8b5be606d39cd0bd2ce6ebd06eb3"}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4004840}, 0x44000)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000040)=0x90)
r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r9, &(0x7f0000002140)={0x2020, 0x0, 0x0, <r10=>0x0}, 0x2020)
syz_fuse_handle_req(r9, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x90, 0x0, 0x0, {0x4, 0x5, 0x0, 0x8, 0x0, 0x0, {0x200000000000, 0x203, 0x6, 0xffff, 0x0, 0xfffffffffffffffc, 0x7f, 0x0, 0x120, 0x2000, 0x0, r10, 0x0, 0xfc24, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
getgroups(0x1, &(0x7f0000000080)=[<r11=>0x0])
write$FUSE_ATTR(r8, &(0x7f0000000180)={0x78, 0xfffffffffffffff5, 0x0, {0x7, 0xe, 0x0, {0x4, 0x3, 0x0, 0x8000000000000001, 0x2, 0xd, 0x1, 0xfffffe00, 0x6, 0xc000, 0x6, r10, r11, 0x72}}}, 0x78)
open_by_handle_at(r0, &(0x7f0000000200)=@ceph_nfs_fh={0x8, 0x1, {0x9}}, 0x0)

4.498002481s ago: executing program 4 (id=832):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x82, &(0x7f0000000340), &(0x7f0000000480)=0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async)
bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r2) (async)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r2)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, r3, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x810)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x4000) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044800}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c000780080012400000000205000500020000000500010006"], 0x58}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)
openat$comedi(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/comedi4\x00', 0x109000, 0x0) (async)
r8 = openat$comedi(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/comedi4\x00', 0x109000, 0x0)
r9 = socket$l2tp6(0xa, 0x2, 0x73)
sendto$l2tp6(r9, &(0x7f0000000600)="7d30fb023f94f127d525aea79f519ceff24253582679cb463dec09739fe49739e39543bcd6544c92f0441505ac83799f2f5967f8096957eea34d041d4a877cd8bddc30624d56c1e18d1b9664083db749a8be5b8b14d72ba0caae9f23b98f097633524e18c4b161b612c17fa48b009bb07ec3485f91b50a98b7047f80cf43e40655a858b0c8e8255b00e682c10f874c2bea17fe8497ea7326242a3bbc384448b70db8d24673ff197cb429f686a06b7308b611e2c3fd20f9fbfa96279f99c60f0dc7f0d858f2507d26fb31643dc3971b8e1c0fade2789bf2320a18ed52ec21fca8809a8a856e8835f2eeb69be33d0ae61782e805221306", 0xf6, 0x240048c4, 0x0, 0x0) (async)
sendto$l2tp6(r9, &(0x7f0000000600)="7d30fb023f94f127d525aea79f519ceff24253582679cb463dec09739fe49739e39543bcd6544c92f0441505ac83799f2f5967f8096957eea34d041d4a877cd8bddc30624d56c1e18d1b9664083db749a8be5b8b14d72ba0caae9f23b98f097633524e18c4b161b612c17fa48b009bb07ec3485f91b50a98b7047f80cf43e40655a858b0c8e8255b00e682c10f874c2bea17fe8497ea7326242a3bbc384448b70db8d24673ff197cb429f686a06b7308b611e2c3fd20f9fbfa96279f99c60f0dc7f0d858f2507d26fb31643dc3971b8e1c0fade2789bf2320a18ed52ec21fca8809a8a856e8835f2eeb69be33d0ae61782e805221306", 0xf6, 0x240048c4, 0x0, 0x0)
ioctl$COMEDI_CHANINFO(r8, 0x80306403, &(0x7f0000049a40)={0x0, &(0x7f00000009c0), 0x0, 0x0})
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008002e00"], 0x1c}], 0x1}, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0xffffff80, 0xbbb, 0x7}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000100}, 0xc000)

3.880312308s ago: executing program 0 (id=833):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045017, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0xa3, 0xd6, 0x13, 0x20, 0x102c, 0x6151, 0x3265, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc5, 0x2, 0x0, 0x2e, 0x85, 0xfe}}]}}]}}, 0x0)
fsetxattr(r0, &(0x7f0000000000)=@random={'osx.', '\x00'}, &(0x7f0000000040)='}\x00', 0x2, 0x6)
syz_usb_connect$cdc_ecm(0x3, 0x60, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4e, 0x1, 0x1, 0x7, 0x20, 0x5, [{{0x9, 0x4, 0x0, 0xff, 0x3, 0x2, 0x6, 0x0, 0x2, {{0x8, 0x24, 0x6, 0x0, 0x0, "44999d"}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x4, 0x2, 0x8}, [@mbim_extended={0x8, 0x24, 0x1c, 0x1000, 0x5, 0xa3f3}, @mbim_extended={0x8, 0x24, 0x1c, 0x40, 0x3}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x3, 0x2d, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7a, 0x7, 0x1}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x40, 0x87, 0x1, 0x10, 0xe0}, 0x1a, &(0x7f0000000180)={0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0xf3, 0x2, 0x401}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x6, 0x0, 0xfff8, 0xf0}]}, 0x2, [{0x15, &(0x7f00000001c0)=@string={0x15, 0x3, "32dbf96752e9c99e258e27719200c22808498e"}}, {0xdf, &(0x7f0000000200)=@string={0xdf, 0x3, "078c4f2ec896ed5100461d920f259ed7711d7cc73de72c8f0cfb87f67283f12ba1d2c4b1ef4c22a730a284e779d92a3774a4ea74e056169421624f690c1d0f8d8dbdd55baa62e3487d6ca2170569fc680d68ec11f3b57526ad4be32fa7c26b3048272d6c3fec8704b90801e10d2b487b3d5eaca0f68652268d76091a06a4e00b55f6b543017a57fc57357fee7764963813456dad1fcd42301bb555f6cb80167d3151862c893ed342ba9b59194f934ba3b35bd52a06b5f3e04c9d3adf0234394f2e593157e735ad49ad24b83be191460e13c7aae7b8a0f271dcce73cf22"}}]})

3.818670001s ago: executing program 2 (id=834):
r0 = memfd_create(&(0x7f0000000640)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\xebo\t\x1d\x1a\x18\xf4\xd1\x81\\\xcaI\x92\x98e\x13v\x9f\xfd\xdf\x1b\x8dg\x86^\xfcf\xf4\xf0pI\xee\xf5\x01\xd5\xbf\x13\xf8\x92\xf6\x9f=\x02sF\xbaS\x13\x8ba\xf3dUG\n>\xfa\x12\xcf\xe4\xf0;o-K\xd4\xb1\x03\t;\xe6\xefz\xb4\x9c\x82E\x8a\x05\r\xf8:\xfaG{\xa6\x95s@\xb3|\x9a\xd1\x81\x8b\x1d:\xdb\xd9\xacU\b\xe7$\xea\xc9\xca\xd3*\x97\x03\x98\xcf\x03\xc4\\\x88\xfd\x86\xcc9\xee\x8bG\x82#\x01\x02V.\x03\x946 \\\xf9\xb7\x11\x02\xa6b\x8bI\xf8\xdc\xfeSw\x1e84\xe8\x8d\x04rQp\xf0\x8e<.\bD^zz9\x11qh\x8e\x8a\x8d\xcc\x05Y^U\x1a\"\x0f\xe3y]D\xda\x10/];\x8cT\\\x0f\x86\xd9\xc7.\xae\xb4\xbf\x1c\x8a\xe4\xe5\xe4\xfb\xf6\xa67\t\xae\"O\x7f(\xa8\x8bb\xd6Q\xaa\xb38\a\x05S\x8a\xa9\xca\xba\xfa\xfb\xb6\xa4|g\x18\xb7S\x86;\xc2\xa4\x9b\x9e\x7f?\xf8\x06\xb5v\xc5\xbe\x95\x16\xfe\xff[\xc1-\x06\xfe\xfb\xbf\xeb`\x827If\xb7', 0x0)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x48002, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r3, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x80000000000000c, 0x0, 0x4, 0x10000, 0x7, 0x9004, 0x9, 0x8, 0x9, 0x5, 0x49, 0x3ff, 0x5, 0x2, 0x1, 0x8, 0x7, 0xc1, 0x1, 0x2, 0x2, 0x6, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x5, 0x7, 0x4, 0x3, 0x9, 0x888f, 0x1, 0x6, 0x46, 0x1, 0x3, 0xa3de, 0x20000000006, 0x8, 0x7, 0x400, 0x3, 0xffffffffffffffb7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x10001, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x4000000007, 0x2, 0x3, 0x2, 0x2, 0xfff, 0x6, 0x4, 0x1, 0xab6, 0x0, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x8061d, 0x3, 0x7, 0xf6, 0x4, 0x6, 0x204, 0x7, 0xe53e, 0x4, 0x8, 0x2293332f, 0x6, 0x5, 0x1e, 0xd, 0x2, 0x4, 0xfffffffffffffffb, 0x80000001, 0x7, 0xdfd4, 0xfff9, 0x10, 0x5, 0x8, 0x1, 0x6, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x1000003]})
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x34, r1, 0x1, 0x70bd27, 0x25dfd3fb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c084}, 0x0)
execveat(r0, &(0x7f0000000280)='\x00', 0x0, 0x0, 0x1000)
r6 = socket$igmp(0x2, 0x3, 0x2)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x20, 0x1)
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x4, @vifc_lcl_addr=@remote, @empty}, 0x10)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')

3.147782406s ago: executing program 2 (id=835):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000080), 0x10)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2e, 0x9f, 0xdc, 0x40, 0x403, 0xf850, 0x53a6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xf0, 0x0, [{{0x9, 0x4, 0xd1, 0x0, 0x0, 0xfb, 0xad, 0xfa}}]}}]}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x0)
setresuid(r1, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$kcm(0x29, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x148)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="6465636f64657308e1616e6f6e6500"], 0xd)
r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0xa2000)
ioctl$SG_GET_VERSION_NUM(r4, 0x2282, &(0x7f0000000080))
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r6, &(0x7f0000000440)=',', 0x1, 0x4000, 0x0, 0x0)
sendto$inet(r6, &(0x7f00000000c0)="80", 0x1, 0x40801, 0x0, 0x0)
r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$FBIOGETCMAP(r7, 0x4604, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=[0x0], 0x0, 0xffffffffffffffff, 0x0})
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002240)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000000040)=0x40)
r8 = openat$cgroup_subtree(r5, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000100)={[{0x2d, 'pids'}]}, 0x6)
socket$can_bcm(0x1d, 0x2, 0x2)
mount(&(0x7f0000000240)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='ocfs2_dlmfs\x00', 0x8, &(0x7f0000000300)='W\\#-\',-#{\x00')
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
pselect6(0x40, &(0x7f0000000040)={0x3, 0x10000, 0x3, 0x7, 0x4, 0x7ff, 0xf, 0xe11d}, 0x0, &(0x7f00000001c0)={0x8, 0x0, 0x1, 0x100000001, 0x5, 0x100000000, 0x4, 0x262}, 0x0, 0x0)

2.380279744s ago: executing program 0 (id=836):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040d1180094ba000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f00000002c0)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB='}w\''], 0x0}, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x4c)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES64=r1], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000680)={0x0, 0x10, 0x6, "11287bb87f00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
close(0x3)
socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000001740)=0x7ffffffd, 0x4)
write$binfmt_script(r4, 0x0, 0x6f4000)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x94}}, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, &(0x7f00000005c0)={0x14, &(0x7f00000006c0)={0x40, 0x8, 0xf9, {0xf9, 0xb, "e1de73bbc3aa1b33b339f65a9b6148f98a4f3caf202a94ba03f1c295770fddc6a7ed5602c13dbf37476e0f994ac0bb8efb9e20322e3df2780cb5e970af481dd7f84a50f61ae5f3ff5f79dfe8d28e772e5b5a87fd73ffdeab48fa89952be99dc0d9c1abc0cc4c7c3f0287e8257e2b822c097a44cd30b7ab017f7998ada21f69ccd03cd3adbbc46a3ae2f5844dbd47b4d9a53c06dcfa79c545a826c32302bdfd9d29ef303b2d77142245ca68252737877b4c189a39bc30b53c40042914f528c11346301ad3cee58fb9b2bca6e061a3bcf8f2cfca9a3e43d98f434700479c89b8cc1c2bbdbfed4a7cfaa4d57af9c7c9e5a5b5ed976629b6a9"}}, &(0x7f00000007c0)={0x0, 0x3, 0xcd, @string={0xcd, 0x3, "6f245d6e9206c75b8f329419c74eba10487e44af257d3e8edbdea23b44609ee3032d7c4bff7869ab61e60651ef4e65aa73cff32c9f7c7fe95e3c933830d8506dbede2e0a2012261ee1eaa0aea6aebd8f84d47700633477cf1afba3c453994b070a0867464b6d01291d16e9f84a89933eb8ca090ecdd46e9552e9cde4c4d3947141edf5d778887b0f29625d00a4d7f98d7f7064a04f8d6eaf14533dd7308da8bb24276460b08f31e054b186bbcefbdda5a7f084d41d42e7d23c7d841825af9487e717344f1c77faed8a8af1"}}}, &(0x7f0000000b40)={0x44, &(0x7f00000009c0)={0x20, 0x30, 0x7f, "5e85708710ca7f460588102757d6234a74aefc251aa11a18d46896780dd34b68f71bca32c9671ae2af90ee361f2d344a02494034a5f0943fec62c9659337bce6580c06ee8c00be1456f258107e190282c0f8b7a42b7eb6a5c708d712e283dab62b74185ff717148a75f25522322908013ff0b8bf322c679d85576b286883e2"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000008c0)={0x20, 0x81, 0x1, ':'}, &(0x7f0000000900)={0x20, 0x82, 0x1, "fe"}, &(0x7f0000000a80)={0x20, 0x83, 0x2, "5202"}, &(0x7f0000000ac0)={0x20, 0x84, 0x2, '!T'}, &(0x7f0000000b00)={0x20, 0x85, 0x3, "0d1f0a"}})
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)={0x40, 0x0, 0x4, "f7aeadf1"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, &(0x7f0000000240)={0x14, &(0x7f0000000080)={0x40, 0x4, 0xbd, {0xbd, 0x22, "53478622be8155362217dc100311ccc34f9fa9b605be5e9d2b1e42e2b22f62f449cbe8e318fdbd0ace29a9a1f75b197b937e74320f606c7ee7f37ab0e2a02e49b6b0b7f0c23500d68202fd6aba73f88b0ed1b934da23f0bf874f2bffc616d6b3fbe67f962af752f567a220ca3826c3b17f1f9c7a88741818d72255dd5aba28877c490715532e1bc60689c83d379e1f3149d4b32d729645666146182f534a09b413cc39e9088c67e60ce83c1f57a0c53eafb0137d2466f43b040041"}}, &(0x7f0000000180)={0x0, 0x3, 0xae, @string={0xae, 0x3, "eb2ca7d4a97beef583e4bbb40cc03c0cb2a2a24e645a33beae1946d0a038289d38cfb7b065de8257fd2e35faa78fb238d0a8f7a6f9ebd5efdb38c52ea670d11c2fee840cccdcf4c5149962e2ced1b227c81fc1767c1a1cb67a8dce537d4720a227f52e17c5923cdd6234a7f249764e1803fba6b9ffa6716a44110d4582d3c77195263c8bfdfde7727cd5d101a41a262fbf91dc9d3454782ec59a76e1d745d5060c69f8bf76bc471a2d77937a"}}}, &(0x7f0000000540)={0x44, &(0x7f0000000300)={0x20, 0x15, 0x87, "64eda9911a0305ed196fb2c5dbbd344b74e8de58e44fd8d491935c7b5678f991e15d25946d4f911687feaebc62bc2ea107a513252ee28c3b2d7f24e1bdd1543ad1282136d8cf1c12a6a120a2ea1a9f4099b4229e20700cfbace9911c816885d00c891c6eca544b7e00cb5b32a654a2587ff5d2cd443783bc31dc6797796cf6abb337d6691dabd6"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000400)={0x20, 0x81, 0x3, "18f7a2"}, &(0x7f0000000440)={0x20, 0x82, 0x2, "0369"}, &(0x7f0000000480)={0x20, 0x83, 0x3, "fdc8a1"}, &(0x7f00000004c0)={0x20, 0x84, 0x2, "cec1"}, &(0x7f0000000500)={0x20, 0x85, 0x3, "7f30a4"}})

1.235696481s ago: executing program 5 (id=828):
syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000018dfde1035121000822953050a01090212000100000000090400"], 0x0)
syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000018dfde1035121000822953050a01090212000100000000090400"], 0x0) (async)

638.415387ms ago: executing program 5 (id=837):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000fc0)={'syz1\x00', {0x6, 0x8001, 0x0, 0x529}, 0x26, [0xf5, 0x8, 0x80000001, 0x2, 0x202, 0xffffffff, 0x8e, 0x9, 0x9, 0x4, 0x0, 0x9, 0x7, 0x1, 0xfffffffe, 0x38, 0xffffff7f, 0xac, 0x5, 0x1443, 0x0, 0xea7, 0x1, 0x9be4bf38, 0x0, 0x20002, 0xc, 0x9, 0xc, 0x6, 0x84, 0xd3, 0x8001, 0x3, 0x2001, 0xb, 0x2, 0x5f84, 0xfffffffe, 0xc1e, 0x9da, 0x939a, 0x8000, 0x1, 0x5c, 0x8, 0x7f, 0x3, 0xf2b, 0x1, 0x6, 0xfffffffa, 0xffff, 0x8, 0x7, 0x6, 0xffffff7e, 0xf3, 0x9, 0xd2, 0x8001, 0x5, 0x53, 0x1], [0x5, 0x2, 0xd91, 0x8, 0x401, 0x8, 0x1, 0x5, 0xfffffffe, 0x40a89, 0xffb, 0xffffff4b, 0x1, 0x2, 0x0, 0x0, 0x8, 0x8, 0xffffffff, 0x405, 0x2, 0x9, 0x5, 0x5, 0xd, 0xa, 0x8001, 0x9, 0xa, 0x5, 0xf, 0xb2cf, 0x1, 0x200, 0xec, 0x9, 0x100, 0x9, 0x9, 0x10001, 0x1, 0x865f, 0x8ec5, 0x3, 0x802, 0x7, 0x3, 0x29e3, 0xce, 0x40b4e5, 0x20000, 0x200, 0x5, 0x4, 0xff, 0x9, 0x1d, 0x3, 0x10000, 0xa, 0x26, 0x2, 0x6, 0xad], [0x4343fe9f, 0xfffffffd, 0x101, 0xffffffff, 0x7f, 0x8, 0x3, 0x3, 0xc, 0x0, 0xcb06, 0xfffeffff, 0x4, 0x37, 0x5, 0x80003, 0xc8, 0xc, 0x8000, 0x2, 0xdf9e, 0x40005, 0x8, 0xa, 0x3, 0x7, 0x401, 0x5, 0x5, 0x2, 0x3, 0x2, 0x1, 0x0, 0x10000004, 0x911, 0x7, 0x8000, 0x31c1, 0x8, 0xb, 0x4, 0x2, 0x1f83, 0x9, 0x1, 0x2, 0xd, 0x7, 0x402, 0x9, 0xffff, 0x400, 0x80000000, 0x0, 0xb, 0x80, 0xf, 0x8, 0x8, 0x9, 0x6, 0x4, 0xfffffdad], [0x27b, 0x6, 0x6, 0x10, 0x7, 0x4009, 0x8, 0xff, 0x7fffffff, 0xe012, 0xfffffffa, 0x8, 0xffff7bfb, 0x6720, 0x401, 0x100, 0x2, 0x0, 0xb, 0x8, 0x3, 0x5, 0xfffffc00, 0x91, 0x9, 0x4, 0x80000000, 0x2, 0xa, 0x27, 0x400, 0x70, 0x9, 0xffc, 0x400002, 0xc, 0xffffffff, 0x49, 0x80088, 0x10, 0x5, 0x9a2, 0x81, 0xf011, 0x400, 0x103000, 0x8, 0x5, 0x4, 0xfffffffe, 0xb, 0x1, 0xc3, 0x9, 0x807ff, 0x1, 0x3, 0xfffffc02, 0x3, 0xb, 0x5, 0x8, 0xa, 0xfffffff7]}, 0x45c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01032abd7000fddbdf2505000000b368295f39faad13e214"], 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0xdc}}, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000200)=0x8)
r4 = epoll_create1(0x80000)
epoll_pwait2(r4, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r5, 0x107, 0x0, 0x0, &(0x7f0000000100))
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68)
r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0)
sendfile(r6, r6, 0x0, 0x2002)

504.341972ms ago: executing program 0 (id=838):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000040)=0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001700000008000a0008"], 0x24}}, 0x0)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000cc0)={0x44, r3, 0x1, 0x70bd2c, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x29, 0x9, 0x5}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200040d4}, 0x0)

458.252356ms ago: executing program 0 (id=839):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f00000000c0)={0x11, {{0x29, 0x0, 0x2000000, @empty, 0x3}}}, 0x88)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x803e0000, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100)

185.167109ms ago: executing program 5 (id=840):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r3 = syz_io_uring_setup(0x3087, &(0x7f0000000540)={0x0, 0x7562, 0x13080, 0x3, 0x862f8, 0x0, r2}, &(0x7f0000000080), &(0x7f00000000c0))
read$FUSE(r2, &(0x7f0000001740)={0x2020}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x80, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000040)={0x30002, 0x0, {[0x1, 0x3, 0xb3, 0x7fff, 0x9, 0x7955, 0x10000, 0x1ff]}})
setsockopt$sock_int(r1, 0x29, 0x21, 0x0, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af83, 0x0)

476.863µs ago: executing program 5 (id=841):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000040)={0x0, 0xfffffffd, 0x7, 0xb, 0x200, &(0x7f0000000080)="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"})
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000340)=0x2, 0x4)
sendmmsg$inet(r0, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000080)="cb17cfe4acd3a98e3e2b000000004ef2b8e4fff8a3be978b94b8a6c2f345d98ef5e8df0695620b81a51badebba", 0x2d}, {&(0x7f00000009c0)="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", 0x580}], 0x2}}], 0x2, 0x40)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xb5, 0x10, 0xf2, 0x10, 0xb95, 0x772a, 0x8273, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x22, 0x0, 0x2, 0x89, 0x53, 0x95, 0x0, [], [{{0x9, 0x5, 0xa, 0x2, 0x3ff, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x450}}]}}]}}]}}, 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, 0x0)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x8000, 0x8000, 0x6, 0x0, 0x2}})

0s ago: executing program 2 (id=842):
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x40000000000001d7, 0x0, 0x33cd8a871d1e71f})
r1 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000240)={0x0, r2, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={0x0, r2, 0x1, 0x0, 0x3})
syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) (async)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x40000000000001d7, 0x0, 0x33cd8a871d1e71f}) (async)
socket$pppoe(0x18, 0x1, 0x0) (async)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={0x0}) (async)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000240)={0x0, r2, 0x0, 0x0, 0x4}) (async)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={0x0, r2, 0x1, 0x0, 0x3}) (async)

kernel console output (not intermixed with test programs):

nnect, device number 41
[  171.270728][ T7289] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  171.317083][   T10] gspca_pac7302: reg_w() failed i: ff v: 01 error -110
[  171.336944][   T10] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -110
[  171.496165][ T7293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  171.505478][ T7293] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  171.593897][ T7296] kvm: kvm [7295]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x187) = 0x1
[  171.897280][ T5925] usb 3-1: new full-speed USB device number 42 using dummy_hcd
[  172.036971][   T10] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  172.066281][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  172.084394][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  172.094894][ T5925] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  172.109279][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.127608][ T5925] usb 3-1: config 0 descriptor??
[  172.141567][ T7306] netlink: 'syz.3.414': attribute type 3 has an invalid length.
[  172.152092][ T7306] netlink: 'syz.3.414': attribute type 1 has an invalid length.
[  172.160793][ T7306] netlink: 224 bytes leftover after parsing attributes in process `syz.3.414'.
[  172.162312][ T5925] hub 3-1:0.0: USB hub found
[  172.202030][   T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  172.211295][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.220103][   T10] usb 1-1: Product: syz
[  172.226610][   T10] usb 1-1: Manufacturer: syz
[  172.235727][   T10] usb 1-1: SerialNumber: syz
[  172.295630][ T7308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  172.309331][ T7308] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  172.323839][ T7308] isofs_fill_super: bread failed, dev=nbd3, iso_blknum=16, block=32
[  172.339924][ T5925] hub 3-1:0.0: 3 ports detected
[  172.508299][ T7315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  172.519416][ T7315] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  172.530850][ T7316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  172.547481][ T7316] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  172.652021][   T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  172.666629][   T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  172.773603][ T7323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  172.787412][ T7323] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  172.805773][ T7323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  172.825828][ T7323] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  172.872056][   T29] usb 5-1: USB disconnect, device number 2
[  172.875607][ T5925] usb 3-1: USB disconnect, device number 42
[  172.993379][ T7326] loop5: detected capacity change from 0 to 7
[  173.589164][    C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2
[  173.599613][ T7326] Dev loop5: unable to read RDB block 7
[  173.600058][    C1] Buffer I/O error on dev loop5, logical block 0, lost async page write
[  173.605451][ T7326]  loop5: unable to read partition table
[  173.667104][ T7326] loop5: partition table beyond EOD, truncated
[  173.674612][ T7326] loop_reread_partitions: partition scan of loop5 (����ý?) failed (rc=-5)
[  173.920072][   T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  174.609965][   T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -EPROTO
[  174.633249][   T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  174.661985][   T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  174.679821][ T7351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.428'.
[  174.719685][ T7351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  174.728627][ T7351] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  174.742080][   T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  174.756955][   T10] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[  174.802120][   T10] usb 1-1: USB disconnect, device number 41
[  175.446210][ T7366] netlink: 32 bytes leftover after parsing attributes in process `syz.3.433'.
[  175.487011][   T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  175.607217][ T5924] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  175.651367][   T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=b301, bcdDevice=e4.00
[  175.680396][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.691591][   T10] usb 5-1: Product: syz
[  175.695821][   T10] usb 5-1: Manufacturer: syz
[  175.713458][   T10] usb 5-1: SerialNumber: syz
[  175.734374][   T10] usb 5-1: config 0 descriptor??
[  175.777249][ T5924] usb 1-1: Using ep0 maxpacket: 16
[  175.790642][ T5924] usb 1-1: config 0 has an invalid interface number: 126 but max is 0
[  175.806868][ T5924] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  175.828977][ T5924] usb 1-1: config 0 has no interface number 0
[  175.837371][ T5924] usb 1-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[  175.857446][ T5924] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024
[  175.876974][ T5924] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  175.888393][ T5924] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 29557, setting to 1024
[  175.900203][ T5924] usb 1-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[  175.910756][ T5924] usb 1-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  175.925713][ T5924] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88
[  175.935226][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.960890][ T7359] netlink: 'syz.4.430': attribute type 6 has an invalid length.
[  175.978203][ T7359] netlink: 'syz.4.430': attribute type 6 has an invalid length.
[  175.988035][ T5924] usb 1-1: config 0 descriptor??
[  175.994853][ T7364] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  176.013629][ T7364] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  176.031897][ T5924] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  176.046949][ T6132] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  176.091371][   T24] usb 5-1: USB disconnect, device number 3
[  176.196875][ T6132] usb 3-1: Using ep0 maxpacket: 32
[  176.211770][ T6132] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe
[  176.232339][ T6132] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.253104][ T6216] usb 1-1: USB disconnect, device number 42
[  176.263059][ T6132] usb 3-1: Product: syz
[  176.277651][ T6132] usb 3-1: Manufacturer: syz
[  176.283305][ T6132] usb 3-1: SerialNumber: syz
[  176.305782][ T6132] usb 3-1: config 0 descriptor??
[  176.530347][ T6132] snd-usb-6fire 3-1:0.0: unknown device firmware state received from device:
[  176.540477][ T6132] 00 00 00 00 00 00 00 00 
[  176.545064][ T6132] snd-usb-6fire 3-1:0.0: probe with driver snd-usb-6fire failed with error -5
[  176.937014][ T5924] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  177.101085][ T5924] usb 5-1: config index 0 descriptor too short (expected 65183, got 72)
[  177.112864][ T5924] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  177.126607][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.141176][ T5924] usb 5-1: Product: syz
[  177.145503][ T5924] usb 5-1: Manufacturer: syz
[  177.152094][ T5924] usb 5-1: SerialNumber: syz
[  177.166219][ T5924] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  177.185848][ T5925] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  177.412906][ T7388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  177.422503][ T7388] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  177.435995][ T7388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  177.451232][ T7388] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  177.464358][ T7388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.440'.
[  177.529855][ T7401] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  177.529855][ T7401] The task syz.4.440 (7401) triggered the difference, watch for misbehavior.
[  177.555379][ T7401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  177.567124][ T7401] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  177.581766][ T7401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  177.591481][ T7401] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  177.672084][ T5924] usb 5-1: USB disconnect, device number 4
[  178.193001][ T7420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  178.203240][ T7420] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  178.257491][ T5925] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  178.265862][ T5925] ath9k_htc: Failed to initialize the device
[  178.274189][ T5924] usb 5-1: ath9k_htc: USB layer deinitialized
[  178.567141][ T5924] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  178.577030][   T10] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  178.716883][ T5924] usb 5-1: Using ep0 maxpacket: 32
[  178.727053][   T10] usb 1-1: Using ep0 maxpacket: 32
[  178.738424][ T5924] usb 5-1: config index 0 descriptor too short (expected 241, got 72)
[  178.754235][   T24] usb 3-1: USB disconnect, device number 43
[  178.757943][ T5924] usb 5-1: config 0 has an invalid descriptor of length 141, skipping remainder of the config
[  178.771901][   T10] usb 1-1: config 0 has an invalid interface number: 12 but max is 0
[  178.788711][   T10] usb 1-1: config 0 has no interface number 0
[  178.796900][ T5924] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  178.810503][   T10] usb 1-1: config 0 interface 12 has no altsetting 0
[  178.821118][ T5924] usb 5-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5
[  178.834647][ T5924] usb 5-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da
[  178.859142][   T10] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  178.888314][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.908554][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.918148][   T10] usb 1-1: Product: syz
[  178.922418][   T10] usb 1-1: Manufacturer: syz
[  178.928976][ T5924] usb 5-1: config 0 descriptor??
[  178.946444][   T10] usb 1-1: SerialNumber: syz
[  178.954122][ T5924] mos7840 5-1:0.0: missing endpoints
[  178.974709][   T10] usb 1-1: config 0 descriptor??
[  179.054130][ T7428] netlink: 28 bytes leftover after parsing attributes in process `syz.2.453'.
[  179.184606][ T7428] kvm: kvm [7427]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0xfffffc18
[  179.196734][ T7428] kvm: kvm [7427]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0xfffffc18
[  179.216232][ T7428] kvm: kvm [7427]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xfffffc18
[  179.228319][ T7433] dlm: no locking on control device
[  179.238374][ T7428] kvm: kvm [7427]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0xfffffc18
[  179.248654][ T7428] kvm: kvm [7427]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0xfffffc18
[  179.435428][ T7438] tmpfs: Unknown parameter 'dont_hash'
[  179.450688][ T7438] netlink: 40 bytes leftover after parsing attributes in process `syz.3.456'.
[  179.464094][ T7438] netlink: 40 bytes leftover after parsing attributes in process `syz.3.456'.
[  179.538542][ T7440] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  179.564822][ T7442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  179.590135][ T7442] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  179.640227][ T7442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  179.651552][ T7442] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  179.986992][ T5891] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  180.117084][ T5891] usb 3-1: device descriptor read/64, error -71
[  180.188170][ T5877] usb 5-1: USB disconnect, device number 5
[  180.368773][ T5891] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  180.516897][ T5891] usb 3-1: device descriptor read/64, error -71
[  180.576903][ T5877] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  180.627269][ T5891] usb usb3-port1: attempt power cycle
[  180.726934][ T5877] usb 5-1: Using ep0 maxpacket: 16
[  180.738937][ T5877] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  180.748108][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.756167][ T5877] usb 5-1: Product: syz
[  180.760468][ T5877] usb 5-1: Manufacturer: syz
[  180.765098][ T5877] usb 5-1: SerialNumber: syz
[  180.773629][ T5877] usb 5-1: config 0 descriptor??
[  180.782591][ T5877] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  180.884054][ T7451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  180.893171][ T7451] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  180.964149][ T7455] netlink: 40 bytes leftover after parsing attributes in process `syz.3.461'.
[  180.973403][ T5891] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  181.009343][ T5891] usb 3-1: device descriptor read/8, error -71
[  181.097341][ T5877] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110
[  181.266951][ T5891] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  181.289228][ T5891] usb 3-1: device descriptor read/8, error -71
[  181.336866][   T29] usb 5-1: USB disconnect, device number 6
[  181.408662][ T5891] usb usb3-port1: unable to enumerate USB device
[  181.710197][ T7465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  181.720768][ T7465] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  181.999659][   T10] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71
[  182.018072][   T10] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71
[  182.025456][   T10] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  182.035666][   T10] f81534 1-1:0.12: probe with driver f81534 failed with error -71
[  182.067808][   T10] usb 1-1: USB disconnect, device number 43
[  182.367697][ T6216] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  182.390980][ T7472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  182.400397][ T7472] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  182.436975][   T10] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  182.546898][ T6216] usb 5-1: Using ep0 maxpacket: 8
[  182.554211][ T6216] usb 5-1: config 0 interface 0 has no altsetting 0
[  182.563190][ T6216] usb 5-1: New USB device found, idVendor=04cc, idProduct=8116, bcdDevice=4d.b9
[  182.572420][ T6216] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.582056][ T6216] usb 5-1: Product: syz
[  182.586260][ T6216] usb 5-1: Manufacturer: syz
[  182.591139][ T6216] usb 5-1: SerialNumber: syz
[  182.599277][ T6216] usb 5-1: config 0 descriptor??
[  182.604906][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  182.615378][   T10] usb 1-1: config 14 has an invalid interface number: 51 but max is 0
[  182.626014][   T10] usb 1-1: config 14 has no interface number 0
[  182.632557][   T10] usb 1-1: config 14 interface 51 has no altsetting 0
[  182.642992][   T10] usb 1-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=68.06
[  182.652283][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.660544][   T10] usb 1-1: Product: syz
[  182.664778][   T10] usb 1-1: Manufacturer: syz
[  182.669708][   T10] usb 1-1: SerialNumber: syz
[  182.830382][ T6216] pwc: Sotec Afina Eye USB webcam detected.
[  182.840300][ T6216] pwc: Failed to set LED on/off time (-71)
[  182.846585][ T6216] pwc: send_video_command error -71
[  182.852031][ T6216] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  182.860003][ T6216] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71
[  182.873249][ T6216] usb 5-1: USB disconnect, device number 7
[  182.899276][   T10] ttusb_dec_send_command: command bulk message failed: error -22
[  182.911934][   T10] ttusb-dec 1-1:14.51: probe with driver ttusb-dec failed with error -22
[  182.936474][   T10] usb 1-1: USB disconnect, device number 44
[  183.014636][ T7477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  183.023606][ T7477] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  183.458593][ T7481] netlink: zone id is out of range
[  183.463790][ T7481] netlink: zone id is out of range
[  183.469312][ T7481] netlink: zone id is out of range
[  183.474501][ T7481] netlink: get zone limit has 4 unknown bytes
[  183.499527][ T7482] dvmrp0: entered allmulticast mode
[  183.624170][ T7487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  183.637679][ T7485] syzkaller1: entered promiscuous mode
[  183.643218][ T7485] syzkaller1: entered allmulticast mode
[  183.649323][ T7487] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  183.762669][ T7491] netlink: 48 bytes leftover after parsing attributes in process `syz.4.474'.
[  183.771851][ T7491] netlink: 48 bytes leftover after parsing attributes in process `syz.4.474'.
[  183.797556][ T7489] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  183.890187][ T7495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.473'.
[  183.901406][ T7494] netlink: 48 bytes leftover after parsing attributes in process `syz.4.475'.
[  184.377944][   T10] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  184.466924][ T5925] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  184.546897][   T10] usb 1-1: Using ep0 maxpacket: 16
[  184.557938][   T10] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  184.568388][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.576537][   T10] usb 1-1: Product: syz
[  184.591185][   T10] usb 1-1: Manufacturer: syz
[  184.602979][   T10] usb 1-1: SerialNumber: syz
[  184.618845][   T10] usb 1-1: config 0 descriptor??
[  184.625884][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  184.637217][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  184.660960][   T10] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  184.670140][   T10] usb 1-1: Detected FT-X
[  184.674643][ T5925] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  184.690002][ T5925] usb 5-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  184.700108][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.712329][ T5925] usb 5-1: config 0 descriptor??
[  184.858168][   T10] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  184.887401][   T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  184.905950][   T10] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71
[  184.948579][   T10] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  184.978545][   T10] usb 1-1: USB disconnect, device number 45
[  185.023882][   T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  185.053272][   T10] ftdi_sio 1-1:0.0: device disconnected
[  185.116933][ T6216] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  185.163660][ T7515] netlink: 'syz.3.483': attribute type 4 has an invalid length.
[  185.173118][ T7515] netlink: 17 bytes leftover after parsing attributes in process `syz.3.483'.
[  185.204299][ T5925] hid-udraw 0003:20D6:CB17.0009: item fetching failed at offset 3/7
[  185.219641][ T5925] hid-udraw 0003:20D6:CB17.0009: parse failed
[  185.232553][ T5925] hid-udraw 0003:20D6:CB17.0009: probe with driver hid-udraw failed with error -22
[  185.266933][ T6216] usb 3-1: device descriptor read/64, error -71
[  185.362871][ T7517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.372903][ T7517] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.404636][ T6210] usb 5-1: USB disconnect, device number 8
[  185.516887][ T6216] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  185.646875][ T6216] usb 3-1: device descriptor read/64, error -71
[  185.757114][ T6216] usb usb3-port1: attempt power cycle
[  185.897147][ T5925] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  186.076896][ T5925] usb 1-1: Using ep0 maxpacket: 8
[  186.083716][ T5925] usb 1-1: config 39 has an invalid interface number: 62 but max is 0
[  186.092734][ T5925] usb 1-1: config 39 has no interface number 0
[  186.101680][ T5925] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.04
[  186.107271][ T6216] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  186.118335][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.118363][ T5925] usb 1-1: Product: syz
[  186.131410][ T5925] usb 1-1: Manufacturer: syz
[  186.136138][ T5925] usb 1-1: SerialNumber: syz
[  186.160373][ T6216] usb 3-1: device descriptor read/8, error -71
[  186.291869][ T7527] syzkaller1: entered promiscuous mode
[  186.297520][ T7527] syzkaller1: entered allmulticast mode
[  186.350555][ T7519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  186.364903][ T7530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  186.366504][ T7519] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  186.381354][ T7530] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  186.396384][ T5925] go7007 1-1:39.62: probe with driver go7007 failed with error -12
[  186.407997][ T6216] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  186.417884][ T5925] usb 1-1: USB disconnect, device number 46
[  186.467906][ T6216] usb 3-1: device descriptor read/8, error -71
[  186.578951][ T6216] usb usb3-port1: unable to enumerate USB device
[  186.723128][   T30] audit: type=1804 audit(1768086610.165:5): pid=7539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.490" name="/newroot/19/file1" dev="fuse" ino=1 res=1 errno=0
[  186.768183][   T30] audit: type=1800 audit(1768086610.165:6): pid=7539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.490" name="/" dev="fuse" ino=1 res=0 errno=0
[  186.791710][   T30] audit: type=1800 audit(1768086610.185:7): pid=7535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.490" name="/" dev="fuse" ino=1 res=0 errno=0
[  186.898337][ T7543] netlink: 14 bytes leftover after parsing attributes in process `syz.4.492'.
[  187.031190][ T7543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  187.042717][ T7543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  187.056327][ T7543] bond0 (unregistering): Released all slaves
[  187.236952][ T6216] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  187.388057][ T6216] usb 1-1: Using ep0 maxpacket: 32
[  187.401159][ T6216] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  187.427133][ T6216] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  187.435812][ T6216] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  187.445526][ T6216] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  187.455868][ T6216] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  187.472310][ T6216] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  187.485990][ T6216] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  187.498548][ T6216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.512189][ T6216] usb 1-1: config 0 descriptor??
[  187.636949][ T5925] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  187.697986][ T7558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.710065][ T7558] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.725000][ T7558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.734424][ T6216] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 47 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  187.736184][ T7558] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.761109][ T6216] usb 1-1: USB disconnect, device number 47
[  187.772610][ T7558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.782697][ T6216] usblp0: removed
[  187.786916][ T5925] usb 5-1: Using ep0 maxpacket: 16
[  187.794539][ T5925] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  187.808067][ T5925] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  187.817652][ T7558] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.844419][ T5925] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  187.857466][ T7558] pimreg3: entered allmulticast mode
[  187.865689][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.875619][ T5925] usb 5-1: Product: syz
[  187.881068][ T5925] usb 5-1: Manufacturer: syz
[  187.885830][ T5925] usb 5-1: SerialNumber: syz
[  188.108200][ T5925] usb 5-1: 0:2 : does not exist
[  188.118091][ T5925] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  188.156067][ T5925] usb 5-1: USB disconnect, device number 9
[  188.183097][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  188.257082][ T6216] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  188.296914][ T6210] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  188.416944][ T6216] usb 1-1: Using ep0 maxpacket: 32
[  188.430692][ T6216] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  188.445258][ T6216] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  188.453523][ T7562] program syz.3.499 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  188.454784][ T6210] usb 3-1: Using ep0 maxpacket: 32
[  188.470060][ T6216] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  188.479293][ T6216] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  188.489302][ T6216] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  188.509395][ T6210] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  188.521027][ T6216] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  188.534140][ T6210] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  188.556854][ T6216] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  188.565963][ T6216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.574096][ T6210] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  188.596868][ T6210] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  188.623064][ T6216] usb 1-1: config 0 descriptor??
[  188.633791][ T6210] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  188.645613][ T7564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  188.649055][ T6210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.666006][ T6210] usb 3-1: Product: syz
[  188.670541][ T6210] usb 3-1: Manufacturer: syz
[  188.677419][ T6210] usb 3-1: SerialNumber: syz
[  188.684977][ T7564] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  188.714418][    C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  188.740240][ T6210] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input16
[  188.798599][ T7564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  188.811901][ T7564] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  188.837525][ T6216] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 48 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  188.927411][ T6210] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  188.935826][ T6210]  (id 0x00)
[  188.960332][ T7571] GUP no longer grows the stack in syz.4.502 (7571): 200000005000-200000008000 (200000001000)
[  188.971400][ T7571] CPU: 0 UID: 0 PID: 7571 Comm: syz.4.502 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  188.971438][ T7571] Tainted: [L]=SOFTLOCKUP
[  188.971447][ T7571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  188.971466][ T7571] Call Trace:
[  188.971475][ T7571]  <TASK>
[  188.971484][ T7571]  dump_stack_lvl+0xe8/0x150
[  188.971517][ T7571]  __get_user_pages+0x2465/0x29f0
[  188.971609][ T7571]  __gup_longterm_locked+0x3dc/0x1660
[  188.971657][ T7571]  ? xdp_umem_pin_pages+0xcb/0x350
[  188.971708][ T7571]  pin_user_pages+0x9e/0xd0
[  188.971741][ T7571]  xdp_umem_pin_pages+0x11c/0x350
[  188.971782][ T7571]  xdp_umem_create+0x677/0x8e0
[  188.971830][ T7571]  xsk_setsockopt+0x7b0/0x8d0
[  188.971865][ T7571]  ? __pfx_xsk_setsockopt+0x10/0x10
[  188.971905][ T7571]  ? __fget_files+0x2a/0x420
[  188.971933][ T7571]  ? aa_sock_opt_perm+0xff/0x1a0
[  188.971970][ T7571]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  188.972001][ T7571]  ? __pfx_xsk_setsockopt+0x10/0x10
[  188.972032][ T7571]  do_sock_setsockopt+0x17c/0x1b0
[  188.972062][ T7571]  __x64_sys_setsockopt+0x13f/0x1b0
[  188.972092][ T7571]  do_syscall_64+0xec/0xf80
[  188.972117][ T7571]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.972140][ T7571]  ? trace_irq_disable+0x37/0x100
[  188.972167][ T7571]  ? clear_bhb_loop+0x40/0x90
[  188.972195][ T7571]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.972219][ T7571] RIP: 0033:0x7fce17d8f749
[  188.972253][ T7571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  188.972273][ T7571] RSP: 002b:00007fce18baa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  188.972298][ T7571] RAX: ffffffffffffffda RBX: 00007fce17fe5fa0 RCX: 00007fce17d8f749
[  188.972313][ T7571] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000007
[  188.972327][ T7571] RBP: 00007fce17e13f91 R08: 0000000000000020 R09: 0000000000000000
[  188.972342][ T7571] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000
[  188.972357][ T7571] R13: 00007fce17fe6038 R14: 00007fce17fe5fa0 R15: 00007ffc8028f978
[  188.972393][ T7571]  </TASK>
[  189.185949][ T6210] rc_core: IR keymap rc-imon-pad not found
[  189.192092][ T6210] Registered IR keymap rc-empty
[  189.198746][ T6210] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  189.209419][ T6210] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  189.243787][ T6210] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0
[  189.274779][    C0] usblp0: nonzero read bulk status received: -71
[  189.282986][   T10] usb 1-1: USB disconnect, device number 48
[  189.289777][ T7547] usblp0: error -71 reading from printer
[  189.313864][ T6210] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input17
[  189.363218][ T6210] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:52> initialized
[  189.519893][ T7545] usblp0: removed
[  189.828723][ T7588] hpfs: hpfs_map_sector(): read error
[  189.868711][ T7588] overlayfs: conflicting options: userxattr,redirect_dir=on
[  189.917002][ T6132] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  190.046895][ T6132] usb 5-1: device descriptor read/64, error -71
[  190.306918][ T6132] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  190.316896][ T5925] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  190.436931][ T6132] usb 5-1: device descriptor read/64, error -71
[  190.476902][ T5925] usb 1-1: Using ep0 maxpacket: 8
[  190.488651][ T5925] usb 1-1: config 0 has an invalid interface number: 52 but max is 0
[  190.507019][ T5925] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  190.522879][   T10] usb 3-1: USB disconnect, device number 52
[  190.534707][ T5925] usb 1-1: config 0 has no interface number 0
[  190.545328][ T5925] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0xA has an invalid bInterval 0, changing to 7
[  190.563811][ T5925] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0xA has invalid wMaxPacketSize 0
[  190.568830][ T6132] usb usb5-port1: attempt power cycle
[  190.594520][ T5925] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  190.643267][ T5925] usb 1-1: config 0 interface 52 has no altsetting 0
[  190.669156][ T5925] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  190.694731][ T5925] usb 1-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35
[  190.705958][ T5925] usb 1-1: Product: syz
[  190.712460][ T5925] usb 1-1: Manufacturer: syz
[  190.719502][ T5925] usb 1-1: SerialNumber: syz
[  190.742042][ T5925] usb 1-1: config 0 descriptor??
[  190.957010][ T6132] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  190.967206][ T7591] afs: Unknown parameter 'audit'
[  190.995637][ T6132] usb 5-1: device descriptor read/8, error -71
[  191.019617][ T7598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.509'.
[  191.028579][ T7598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.509'.
[  191.180142][ T5925] usb 1-1: USB disconnect, device number 49
[  191.236999][ T6132] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  191.287517][ T6132] usb 5-1: device descriptor read/8, error -71
[  191.407272][ T6132] usb usb5-port1: unable to enumerate USB device
[  191.606917][ T6132] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  191.734358][ T7607] syzkaller1: entered allmulticast mode
[  191.754535][ T7607] netlink: 40 bytes leftover after parsing attributes in process `syz.0.512'.
[  191.764809][ T6132] usb 3-1: Using ep0 maxpacket: 16
[  191.773668][ T6132] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  191.785023][ T6132] usb 3-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.00
[  191.795367][ T6132] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.808988][ T6132] usb 3-1: config 0 descriptor??
[  191.831566][ T6132] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input18
[  191.925914][ T7609] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.513'.
[  192.033600][ T7605] 9p: Bad value for 'rfdno'
[  192.040793][ T5176] bcm5974 3-1:0.0: could not read from device
[  192.041013][ T6132] usb 3-1: USB disconnect, device number 53
[  192.057776][ T5832] bcm5974 3-1:0.0: could not read from device
[  192.072442][ T7611] binder: 7610:7611 ioctl c0306201 200000000480 returned -14
[  192.397331][ T7624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  192.409164][ T7624] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.670339][ T7629] block nbd0: Unsupported socket: should be TCP or UNIX.
[  193.123430][ T7642] kAFS: unable to lookup cell 'syz0'
[  193.180962][ T7645] kAFS: unable to lookup cell 'syz0'
[  193.210680][ T5925] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  193.238371][ T7648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.522'.
[  193.274566][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.522'.
[  193.386841][ T5925] usb 5-1: Using ep0 maxpacket: 8
[  193.404074][ T5925] usb 5-1: config 2 has an invalid interface number: 31 but max is 0
[  193.432446][ T5925] usb 5-1: config 2 has no interface number 0
[  193.461488][ T5925] usb 5-1: config 2 interface 31 has no altsetting 0
[  193.528082][ T5925] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  193.594581][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.668410][ T5925] usb 5-1: Product: syz
[  193.672661][ T5925] usb 5-1: Manufacturer: syz
[  193.712725][ T5925] usb 5-1: SerialNumber: syz
[  193.780961][ T7667] program syz.3.524 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  193.887978][ T5924] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  193.908666][ T7669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  193.920199][ T7669] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  193.936082][ T7669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  193.948156][ T7669] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  194.036890][ T5924] usb 1-1: device descriptor read/64, error -71
[  194.199497][ T7638] Can't find a SQUASHFS superblock on nullb0
[  194.296983][ T5924] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  194.312652][ T5925] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22
[  194.330366][ T5925] usb 5-1: USB disconnect, device number 14
[  194.437055][ T5924] usb 1-1: device descriptor read/64, error -71
[  194.562025][ T5924] usb usb1-port1: attempt power cycle
[  194.600542][ T7677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  194.609586][ T7677] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  194.846053][ T7680] netlink: 'syz.4.529': attribute type 16 has an invalid length.
[  194.855394][ T7680] netlink: 64130 bytes leftover after parsing attributes in process `syz.4.529'.
[  194.906885][ T5924] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  194.927595][ T5924] usb 1-1: device descriptor read/8, error -71
[  195.132257][ T7686] netlink: 256 bytes leftover after parsing attributes in process `syz.2.532'.
[  195.166900][ T5924] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  195.207666][ T5924] usb 1-1: device descriptor read/8, error -71
[  195.317465][ T5924] usb usb1-port1: unable to enumerate USB device
[  196.622554][ T7716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  196.634992][ T7716] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.746997][   T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  196.899697][ T7725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  196.908762][ T7725] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.916879][   T24] usb 5-1: Using ep0 maxpacket: 32
[  196.926418][ T7725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  196.928963][   T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  196.938553][ T7725] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.955005][   T24] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  196.966322][   T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  196.975658][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  196.984577][   T24] usb 5-1: SerialNumber: syz
[  197.076884][ T6210] usb 1-1: new full-speed USB device number 54 using dummy_hcd
[  197.212072][   T24] usb 5-1: USB disconnect, device number 15
[  197.238880][ T6210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  197.251219][ T6210] usb 1-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00
[  197.260399][ T6210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.271559][ T6210] usb 1-1: config 0 descriptor??
[  197.277574][ T7723] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  197.513982][ T7723] 9p: Bad value for 'port'
[  197.759583][ T7729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  197.771322][ T7729] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  197.878698][ T7733] fuse: Bad value for 'group_id'
[  197.883698][ T7733] fuse: Bad value for 'group_id'
[  197.926523][   T24] usb 1-1: USB disconnect, device number 54
[  198.518777][ T7750] input: syz0 as /devices/virtual/input/input19
[  198.560463][ T7751] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv_slave_1, syncid = 0, id = 0
[  198.631938][ T7752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  198.641028][ T7752] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  198.723253][ T7758] tmpfs: Unknown parameter '����00000000000000000000007'
[  199.104428][ T7766] netlink: 16 bytes leftover after parsing attributes in process `syz.0.555'.
[  199.269975][ T7772] netlink: 16 bytes leftover after parsing attributes in process `syz.2.556'.
[  199.546670][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  199.564191][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  199.740998][ T7792] netlink: 14 bytes leftover after parsing attributes in process `syz.2.564'.
[  199.750379][ T7792] hsr_slave_0: left promiscuous mode
[  199.756687][ T7792] hsr_slave_1: left promiscuous mode
[  199.794975][ T7793] Bluetooth: MGMT ver 1.23
[  200.036892][ T6210] usb 1-1: new low-speed USB device number 55 using dummy_hcd
[  200.136944][   T24] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  200.166898][ T6210] usb 1-1: device descriptor read/64, error -71
[  200.297012][   T24] usb 3-1: Using ep0 maxpacket: 16
[  200.307170][   T24] usb 3-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76
[  200.316318][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.324416][   T24] usb 3-1: Product: syz
[  200.328665][   T24] usb 3-1: Manufacturer: syz
[  200.333302][   T24] usb 3-1: SerialNumber: syz
[  200.342228][   T24] usb 3-1: config 0 descriptor??
[  200.417746][ T6210] usb 1-1: new low-speed USB device number 56 using dummy_hcd
[  200.547156][ T6210] usb 1-1: device descriptor read/64, error -71
[  200.574992][   T24] usb_8dev 3-1:0.0 can0: sending command message failed
[  200.582428][   T24] usb_8dev 3-1:0.0 can0: can't get firmware version
[  200.638485][   T24] usb_8dev 3-1:0.0: probe with driver usb_8dev failed with error -22
[  200.650562][   T24] usb 3-1: USB disconnect, device number 54
[  200.657411][ T6210] usb usb1-port1: attempt power cycle
[  201.024880][ T6210] usb 1-1: new low-speed USB device number 57 using dummy_hcd
[  201.061463][ T6210] usb 1-1: device descriptor read/8, error -71
[  201.307987][ T6210] usb 1-1: new low-speed USB device number 58 using dummy_hcd
[  201.365827][ T6210] usb 1-1: device descriptor read/8, error -71
[  201.500679][ T6210] usb usb1-port1: unable to enumerate USB device
[  201.852077][ T7821] openvswitch: netlink: Missing valid actions attribute.
[  201.860368][ T7821] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  201.868948][ T5891] usb 3-1: new low-speed USB device number 55 using dummy_hcd
[  201.896909][   T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  202.028816][ T5891] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  202.039309][ T5891] usb 3-1: config 0 has no interface number 0
[  202.045477][ T5891] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  202.056913][   T24] usb 5-1: Using ep0 maxpacket: 16
[  202.057939][ T5891] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  202.072847][   T24] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 27
[  202.074644][ T5891] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  202.087035][   T24] usb 5-1: can't read configurations, error -22
[  202.098372][ T5891] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  202.117185][ T5891] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[  202.150923][ T5891] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  202.179001][ T5891] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  202.188523][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.194363][ T7826] fuse: Unknown parameter 'group_i�'
[  202.205377][ T5891] usb 3-1: config 0 descriptor??
[  202.219811][ T7815] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  202.227860][ T7815] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  202.237308][   T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  202.248928][ T5891] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  202.346974][ T7828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  202.360352][ T7828] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  202.387145][   T24] usb 5-1: Using ep0 maxpacket: 16
[  202.393966][   T24] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 27
[  202.403114][   T24] usb 5-1: can't read configurations, error -22
[  202.409843][   T24] usb usb5-port1: attempt power cycle
[  202.465487][ T5891] usb 3-1: USB disconnect, device number 55
[  202.475677][ T5891] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[  202.759673][   T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  202.787971][   T24] usb 5-1: Using ep0 maxpacket: 16
[  202.798099][   T24] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 27
[  202.806674][   T24] usb 5-1: can't read configurations, error -22
[  202.834712][ T7833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  202.846139][ T7833] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  202.932607][ T7835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  202.941507][   T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  202.949347][ T7835] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  202.967601][   T24] usb 5-1: Using ep0 maxpacket: 16
[  202.974520][   T24] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 27
[  202.997267][   T24] usb 5-1: can't read configurations, error -22
[  203.005276][   T24] usb usb5-port1: unable to enumerate USB device
[  203.076319][ T7837] sctp: [Deprecated]: syz.2.581 (pid 7837) Use of int in max_burst socket option.
[  203.076319][ T7837] Use struct sctp_assoc_value instead
[  203.077159][  T107] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  203.229888][  T107] usb 1-1: device descriptor read/64, error -71
[  203.476963][  T107] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  203.522293][ T7841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  203.537292][ T7841] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  203.549152][ T7842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  203.558996][ T7842] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  203.606957][  T107] usb 1-1: device descriptor read/64, error -71
[  203.717286][  T107] usb usb1-port1: attempt power cycle
[  204.056988][  T107] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  204.079121][  T107] usb 1-1: device descriptor read/8, error -71
[  204.316908][  T107] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  204.368303][  T107] usb 1-1: device descriptor read/8, error -71
[  204.390241][ T7848] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  204.478177][  T107] usb usb1-port1: unable to enumerate USB device
[  204.521390][ T7855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  204.538312][ T7855] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  204.646028][ T7860] serio: Serial port pty28
[  204.667746][  T107] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  204.740316][ T7864] pimreg: entered allmulticast mode
[  204.755516][ T7864] netlink: 104 bytes leftover after parsing attributes in process `syz.4.590'.
[  204.770453][ T7864] syzkaller1: entered promiscuous mode
[  204.776001][ T7864] syzkaller1: entered allmulticast mode
[  204.826884][  T107] usb 3-1: Using ep0 maxpacket: 16
[  204.833724][  T107] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  204.846053][  T107] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00
[  204.855280][  T107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.866404][  T107] usb 3-1: config 0 descriptor??
[  205.216974][ T6132] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  205.269302][ T7872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  205.296064][ T7872] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  205.323377][  T107] greenasia 0003:0E8F:0012.000B: hidraw0: USB HID v0.05 Device [HID 0e8f:0012] on usb-dummy_hcd.2-1/input0
[  205.323420][  T107] greenasia 0003:0E8F:0012.000B: no inputs found
[  205.388700][ T6132] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  205.416845][ T6132] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  205.426663][ T6132] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  205.442202][ T6132] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.454860][ T6132] usb 5-1: config 0 descriptor??
[  205.747749][ T5891] usb 3-1: USB disconnect, device number 56
[  205.905192][ T6132] pyra 0003:1E7D:2CF6.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0
[  206.021262][ T7885] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  206.036700][ T7885] block device autoloading is deprecated and will be removed.
[  206.216069][ T7887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  206.225040][ T7887] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  206.418934][ T5830] Bluetooth: hci0: command 0x0406 tx timeout
[  206.708074][ T6132] pyra 0003:1E7D:2CF6.000C: couldn't init struct pyra_device
[  206.721417][ T6132] pyra 0003:1E7D:2CF6.000C: couldn't install mouse
[  206.733619][ T6132] pyra 0003:1E7D:2CF6.000C: probe with driver pyra failed with error -71
[  206.778483][ T6132] usb 5-1: USB disconnect, device number 20
[  206.831038][ T5830] Bluetooth: hci0: unexpected event 0x3e length: 263 > 260
[  206.831075][ T5830] Bluetooth: hci0: unexpected subevent 0x0d length: 262 > 260
[  206.857479][ T5830] Bluetooth: hci0: adv larger than maximum supported
[  206.857536][ T5830] Bluetooth: hci0: adv larger than maximum supported
[  206.906720][ T7903] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  207.118439][ T7912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  207.132407][ T7912] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  207.345719][ T7917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  207.355712][ T5877] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  207.371120][ T7917] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  207.397991][ T7917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  207.409610][ T7917] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  207.426923][ T6132] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  207.511633][ T5877] usb 3-1: device descriptor read/64, error -71
[  207.556877][ T5891] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  207.596830][ T6132] usb 1-1: Using ep0 maxpacket: 8
[  207.610733][ T6132] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  207.620984][ T6132] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.642572][ T6132] usb 1-1: Product: syz
[  207.647287][ T6132] usb 1-1: Manufacturer: syz
[  207.652189][ T6132] usb 1-1: SerialNumber: syz
[  207.675759][ T6132] usb 1-1: config 0 descriptor??
[  207.694879][ T6132] gspca_main: se401-2.14.0 probing 047d:5003
[  207.756860][ T5877] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  207.909220][ T5877] usb 3-1: device descriptor read/64, error -71
[  207.996650][ T7927] fuse: Bad value for 'group_id'
[  208.003070][ T7927] fuse: Bad value for 'group_id'
[  208.017239][ T5877] usb usb3-port1: attempt power cycle
[  208.095115][ T7915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  208.118029][ T7915] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  208.339320][ T6132] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input20
[  208.374202][ T6132] usb 1-1: USB disconnect, device number 63
[  208.381807][ T5877] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  208.410930][ T5877] usb 3-1: device descriptor read/8, error -71
[  208.670042][ T5877] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  208.711353][ T5877] usb 3-1: device descriptor read/8, error -71
[  208.789639][ T7946] netlink: 180 bytes leftover after parsing attributes in process `syz.3.613'.
[  208.827373][ T5877] usb usb3-port1: unable to enumerate USB device
[  208.968138][   T63] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.052375][   T63] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.137167][ T5877] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  209.146393][   T63] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.240459][   T63] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.240770][ T5823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  209.264346][ T5823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  209.274206][ T5823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  209.283757][ T5823] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  209.291721][ T5823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  209.308572][ T5877] usb 1-1: device descriptor read/64, error -71
[  209.473272][   T63] bridge_slave_1: left allmulticast mode
[  209.479547][   T63] bridge_slave_1: left promiscuous mode
[  209.487402][   T63] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.515672][   T63] bridge_slave_0: left allmulticast mode
[  209.522908][   T63] bridge_slave_0: left promiscuous mode
[  209.528945][   T63] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.569153][ T5877] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  209.610595][ T7954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  209.630750][ T7954] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  209.719823][ T5877] usb 1-1: device descriptor read/64, error -71
[  209.831004][ T5877] usb usb1-port1: attempt power cycle
[  210.058453][ T7950] chnl_net:caif_netlink_parms(): no params data found
[  210.177238][ T5877] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  210.208703][ T5877] usb 1-1: device descriptor read/8, error -71
[  210.479566][ T5877] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  210.535715][ T5877] usb 1-1: device descriptor read/8, error -71
[  210.657581][ T5877] usb usb1-port1: unable to enumerate USB device
[  210.704751][ T7975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.729496][ T7975] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.792691][ T7950] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.807174][ T7950] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.816261][ T7950] bridge_slave_0: entered allmulticast mode
[  210.829499][ T7950] bridge_slave_0: entered promiscuous mode
[  210.860158][ T7950] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.879596][ T7950] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.899912][ T7950] bridge_slave_1: entered allmulticast mode
[  210.918266][ T7950] bridge_slave_1: entered promiscuous mode
[  210.993787][   T63] hsr_slave_0: left promiscuous mode
[  211.000285][   T63] hsr_slave_1: left promiscuous mode
[  211.006646][   T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  211.014675][   T63] batman_adv: batadv0: Removing interface: batadv_slave_0
[  211.023839][   T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  211.032730][   T63] batman_adv: batadv0: Removing interface: batadv_slave_1
[  211.061183][   T63] veth1_macvtap: left promiscuous mode
[  211.067257][   T63] veth0_macvtap: left promiscuous mode
[  211.073058][   T63] veth1_vlan: left promiscuous mode
[  211.078831][   T63] veth0_vlan: left promiscuous mode
[  211.087262][ T5891] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  211.246997][ T5891] usb 3-1: device descriptor read/64, error -71
[  211.255877][   T63] pimreg (unregistering): left allmulticast mode
[  211.383532][ T5830] Bluetooth: hci2: command tx timeout
[  211.497072][ T5891] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  211.666903][ T5891] usb 3-1: device descriptor read/64, error -71
[  211.777186][ T5891] usb usb3-port1: attempt power cycle
[  212.032544][   T63] team0 (unregistering): Port device team_slave_1 removed
[  212.095214][   T63] team0 (unregistering): Port device team_slave_0 removed
[  212.129192][ T5891] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  212.158430][ T5891] usb 3-1: device descriptor read/8, error -71
[  212.426921][ T5891] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  212.448874][ T5891] usb 3-1: device descriptor read/8, error -71
[  212.570177][ T5891] usb usb3-port1: unable to enumerate USB device
[  212.581846][ T7993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  212.593616][ T7993] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  212.607644][ T7993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  212.616454][ T7993] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  212.920397][ T7950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  212.934628][ T7950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  213.003754][ T7950] team0: Port device team_slave_0 added
[  213.014242][ T7950] team0: Port device team_slave_1 added
[  213.077997][ T7950] batman_adv: batadv0: Adding interface: batadv_slave_0
[  213.091636][ T7950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  213.117866][ T7950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  213.138213][ T7950] batman_adv: batadv0: Adding interface: batadv_slave_1
[  213.145764][ T7950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  213.172379][ T7950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  213.457767][ T5830] Bluetooth: hci2: command tx timeout
[  213.537081][ T7950] hsr_slave_0: entered promiscuous mode
[  213.544023][ T7950] hsr_slave_1: entered promiscuous mode
[  213.591279][ T7950] debugfs: 'hsr0' already exists in 'hsr'
[  213.617610][ T7950] Cannot create hsr debugfs directory
[  213.663855][ T8014] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  213.928680][ T8023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  213.953871][ T8023] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  213.958663][ T5877] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  214.136666][ T5877] usb 1-1: Using ep0 maxpacket: 16
[  214.154668][ T5877] usb 1-1: config 1 has an invalid interface number: 105 but max is 0
[  214.163335][ T5877] usb 1-1: config 1 has no interface number 0
[  214.172690][ T5877] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  214.188246][ T5877] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  214.199947][ T5877] usb 1-1: config 1 interface 105 has no altsetting 0
[  214.211141][ T5877] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  214.221818][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.230573][ T5877] usb 1-1: Product: syz
[  214.234963][ T5877] usb 1-1: Manufacturer: syz
[  214.240099][ T5877] usb 1-1: SerialNumber: syz
[  214.262221][ T8016] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  214.274398][ T8033] netlink: 'syz.2.632': attribute type 1 has an invalid length.
[  214.277977][ T8016] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  214.293538][ T8033] netlink: 16 bytes leftover after parsing attributes in process `syz.2.632'.
[  214.304740][ T8033] netlink: 'syz.2.632': attribute type 1 has an invalid length.
[  214.529284][ T5877] aqc111 1-1:1.105: probe with driver aqc111 failed with error -71
[  214.583866][ T5877] usb 1-1: USB disconnect, device number 68
[  214.667851][ T5891] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  214.760311][ T7950] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  214.785972][ T7950] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  214.795736][ T8040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  214.811171][ T5891] usb 3-1: device descriptor read/64, error -71
[  214.815830][ T8040] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  214.835980][ T7950] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  214.870443][ T7950] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  215.077255][ T5891] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  215.224394][ T7950] 8021q: adding VLAN 0 to HW filter on device bond0
[  215.236958][ T5891] usb 3-1: device descriptor read/64, error -71
[  215.303342][ T7950] 8021q: adding VLAN 0 to HW filter on device team0
[  215.337906][ T1975] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.345318][ T1975] bridge0: port 1(bridge_slave_0) entered forwarding state
[  215.365501][ T5891] usb usb3-port1: attempt power cycle
[  215.410690][ T1975] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.417975][ T1975] bridge0: port 2(bridge_slave_1) entered forwarding state
[  215.542668][ T5823] Bluetooth: hci2: command tx timeout
[  215.727427][ T5891] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  215.780517][ T5891] usb 3-1: device descriptor read/8, error -71
[  215.857781][ T6210] usb 1-1: new full-speed USB device number 69 using dummy_hcd
[  215.895588][ T8082] [syz.3.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820]
[  215.905932][ T8083] [syz.3.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820]
[  216.021438][ T6210] usb 1-1: config 9 has an invalid interface number: 252 but max is 0
[  216.035470][ T8086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  216.037891][ T6210] usb 1-1: config 9 has no interface number 0
[  216.054446][ T8086] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  216.067138][ T5891] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  216.086845][ T6210] usb 1-1: config 9 interface 252 has no altsetting 0
[  216.101079][ T6210] usb 1-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice=dd.7c
[  216.117881][ T5891] usb 3-1: device descriptor read/8, error -71
[  216.125522][ T6210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.149297][ T6210] usb 1-1: Product: syz
[  216.153541][ T6210] usb 1-1: Manufacturer: syz
[  216.173133][ T7950] 8021q: adding VLAN 0 to HW filter on device batadv0
[  216.182172][ T6210] usb 1-1: SerialNumber: syz
[  216.247263][ T5891] usb usb3-port1: unable to enumerate USB device
[  216.726447][ T7950] veth0_vlan: entered promiscuous mode
[  216.766672][ T7950] veth1_vlan: entered promiscuous mode
[  216.907659][ T7950] veth0_macvtap: entered promiscuous mode
[  216.930705][ T7950] veth1_macvtap: entered promiscuous mode
[  216.977124][ T5823] Bluetooth: hci0: command 0x0406 tx timeout
[  217.011357][ T7950] batman_adv: batadv0: Interface activated: batadv_slave_0
[  217.087721][ T7950] batman_adv: batadv0: Interface activated: batadv_slave_1
[  217.134469][ T2209] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  217.163994][  T139] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  217.192474][  T139] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  217.211981][  T139] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  217.555379][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.592771][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.593117][ T8127] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  217.617660][ T5830] Bluetooth: hci2: command tx timeout
[  217.686113][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.719222][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  218.053169][ T8142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  218.065586][ T8142] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  218.176925][ T5817] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[  218.232659][ T8146] netlink: 52 bytes leftover after parsing attributes in process `syz.0.648'.
[  218.347552][ T5817] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[  218.357093][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.381062][ T5817] usb 3-1: config 0 descriptor??
[  218.442758][ T8152] fuse: Unknown parameter 'default_permhssions'
[  218.565952][ T6210] appletouch 1-1:9.252: Could not find int-in endpoint
[  218.586397][ T6210] appletouch 1-1:9.252: probe with driver appletouch failed with error -5
[  218.599316][ T6210] usbhid 1-1:9.252: couldn't find an input interrupt endpoint
[  218.621217][ T6210] usb 1-1: USB disconnect, device number 69
[  218.629416][ T5817] kaweth 3-1:0.0: Firmware present in device.
[  218.761182][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.651'.
[  218.793208][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.651'.
[  218.814416][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.651'.
[  218.815705][ T5817] kaweth 3-1:0.0: Statistics collection: 0
[  218.834577][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.651'.
[  218.845413][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.651'.
[  218.847917][ T5817] kaweth 3-1:0.0: Multicast filter limit: 0
[  218.858341][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.651'.
[  218.868303][ T5817] kaweth 3-1:0.0: MTU: 0
[  218.873357][ T5817] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00
[  218.882544][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.651'.
[  218.894056][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.651'.
[  219.455235][ T8166] Scaler: =================  START STATUS  =================
[  219.462923][ T5817] kaweth 3-1:0.0: kaweth interface created at eth1
[  219.497748][ T8166] Scaler: ==================  END STATUS  ==================
[  219.627023][ T5890] usb 3-1: USB disconnect, device number 69
[  220.226845][ T5890] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  220.396880][ T5890] usb 1-1: Using ep0 maxpacket: 16
[  220.409262][ T5890] usb 1-1: config 0 has an invalid interface number: 83 but max is 0
[  220.444459][ T5890] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  220.478774][ T5890] usb 1-1: config 0 has no interface number 0
[  220.484946][ T5890] usb 1-1: config 0 interface 83 altsetting 0 bulk endpoint 0xC has invalid maxpacket 32
[  220.508464][ T5890] usb 1-1: config 0 interface 83 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  220.522686][ T5890] usb 1-1: config 0 interface 83 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  220.560928][ T5890] usb 1-1: config 0 interface 83 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 13
[  220.583508][ T5890] usb 1-1: New USB device found, idVendor=0499, idProduct=4613, bcdDevice=9a.8e
[  220.593309][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.643673][ T5890] usb 1-1: config 0 descriptor??
[  220.656538][ T8203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  220.668276][ T8203] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  220.676374][ T8182] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  220.890645][ T8182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  220.921857][ T8182] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  220.937090][ T5890] usb 1-1: USB disconnect, device number 70
[  221.363439][ T8226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  221.385635][ T8226] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  221.536996][ T8120] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[  221.686835][ T8120] usb 3-1: Using ep0 maxpacket: 16
[  221.695927][ T8120] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  221.712620][ T8120] usb 3-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58
[  221.722498][ T8120] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.730608][ T8120] usb 3-1: Product: syz
[  221.734931][ T8120] usb 3-1: Manufacturer: syz
[  221.739801][ T8120] usb 3-1: SerialNumber: syz
[  221.960982][ T8120] pn533_usb 3-1:5.0: NFC: Could not find bulk-in or bulk-out endpoint
[  221.982747][ T8120] usb 3-1: USB disconnect, device number 70
[  222.029251][ T5890] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  222.186866][ T5890] usb 1-1: Using ep0 maxpacket: 8
[  222.195380][ T5890] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[  222.204337][ T5890] usb 1-1: config 0 has no interface number 0
[  222.210562][ T5890] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  222.221742][ T5890] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  222.233615][ T5890] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  222.244754][ T5890] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  222.257906][ T5890] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  222.267038][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.277579][ T5890] usb 1-1: config 0 descriptor??
[  222.293840][ T5890] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  222.534345][ T5877] usb 1-1: USB disconnect, device number 71
[  222.563898][ T5877] ldusb 1-1:0.55: LD USB Device #0 now disconnected
[  222.990449][ T8252] __nla_validate_parse: 25 callbacks suppressed
[  222.990472][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.672'.
[  223.018970][ T5890] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  223.047210][ T8252] tipc: Enabling of bearer <udP:s> rejected, media not registered
[  223.156539][ T8254] mmap: syz.2.673 (8254) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  223.197710][ T5890] usb 5-1: Using ep0 maxpacket: 32
[  223.206167][ T5890] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  223.225321][ T5890] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  223.247328][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.265710][ T5890] usb 5-1: Product: syz
[  223.274884][ T5890] usb 5-1: Manufacturer: syz
[  223.290434][ T5890] usb 5-1: SerialNumber: syz
[  223.320275][ T5890] usb 5-1: config 0 descriptor??
[  223.352708][ T5890] usb 5-1: bad CDC descriptors
[  223.360531][ T5890] usb 5-1: unsupported MDLM descriptors
[  223.542973][ T6210] usb 5-1: USB disconnect, device number 22
[  223.963980][ T5925] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[  224.144214][ T5925] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  224.172337][ T5925] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  224.203294][ T5925] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  224.226888][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3
[  224.245057][ T5925] usb 1-1: Product: syz
[  224.255003][ T8280] binder: 8279:8280 ioctl c0306201 200000000080 returned -14
[  224.266901][ T5925] usb 1-1: Manufacturer: syz
[  224.271765][ T5925] usb 1-1: SerialNumber: syz
[  224.282477][ T8280] binder: 8279:8280 ioctl 80086601 200000000140 returned -22
[  224.302025][ T5925] cdc_mbim 1-1:1.0: skipping garbage
[  224.307513][ T5925] usb 1-1: selecting invalid altsetting 1
[  224.509151][ T5925] cdc_mbim 1-1:1.0: bind() failure
[  224.530379][ T5925] usb 1-1: USB disconnect, device number 72
[  224.906142][ T8288] netlink: 'syz.3.684': attribute type 7 has an invalid length.
[  225.175587][ T8302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  225.187196][ T8302] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  225.369636][ T5925] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[  225.529785][ T5925] usb 1-1: Using ep0 maxpacket: 8
[  225.537825][ T5925] usb 1-1: unable to get BOS descriptor or descriptor too short
[  225.546824][ T5925] usb 1-1: config 3 has an invalid interface number: 40 but max is 0
[  225.554954][ T5925] usb 1-1: config 3 has no interface number 0
[  225.561330][ T5925] usb 1-1: config 3 interface 40 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 32
[  225.571317][ T5925] usb 1-1: config 3 interface 40 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 64
[  225.585864][ T5925] usb 1-1: New USB device found, idVendor=1a72, idProduct=1002, bcdDevice=60.21
[  225.596205][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.604347][ T5925] usb 1-1: Product: syz
[  225.608617][ T5925] usb 1-1: Manufacturer: syz
[  225.613256][ T5925] usb 1-1: SerialNumber: syz
[  225.624850][ T8299] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  225.632635][ T8299] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  225.748421][ T6210] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[  225.835866][ T8320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  225.850878][ T8320] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  225.863926][ T8299] netlink: 'syz.0.688': attribute type 1 has an invalid length.
[  225.872871][ T5925] ftdi_sio 1-1:3.40: FTDI USB Serial Device converter detected
[  225.887904][ T5925] ftdi_sio ttyUSB0: unknown device type: 0x6021
[  225.906030][ T5925] usb 1-1: USB disconnect, device number 73
[  225.916928][ T6210] usb 3-1: Using ep0 maxpacket: 16
[  225.927466][ T6210] usb 3-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.00
[  225.934430][ T5925] ftdi_sio 1-1:3.40: device disconnected
[  225.948839][ T6210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.980391][ T6210] usb 3-1: config 0 descriptor??
[  226.007961][ T6210] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input21
[  226.194759][ T5176] bcm5974 3-1:0.0: could not read from device
[  226.212179][ T5176] bcm5974 3-1:0.0: could not read from device
[  226.221729][ T5176] bcm5974 3-1:0.0: could not read from device
[  226.230317][ T6210] usb 3-1: USB disconnect, device number 71
[  226.232245][ T5176] bcm5974 3-1:0.0: could not read from device
[  226.641928][ T8330] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  226.718644][ T8327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  226.739226][ T8327] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  226.756950][ T5925] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[  226.916866][ T5925] usb 1-1: Using ep0 maxpacket: 8
[  226.930833][ T5925] usb 1-1: config 5 has an invalid interface number: 151 but max is 0
[  226.951246][ T5925] usb 1-1: config 5 has no interface number 0
[  226.995488][ T5925] usb 1-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=1e.b5
[  227.023628][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.041545][ T5925] usb 1-1: Product: syz
[  227.045944][ T5925] usb 1-1: Manufacturer: syz
[  227.052345][ T5925] usb 1-1: SerialNumber: syz
[  227.106890][ T5890] usb 5-1: new full-speed USB device number 23 using dummy_hcd
[  227.152596][ T8340] syz.2.703 (8340) used greatest stack depth: 17592 bytes left
[  227.213688][ T8344] autofs: Unknown parameter 'SU��ɶj�f_��y1��+����zk|�*���˨0��'
[  227.222775][ T5823] Bluetooth: hci3: command 0x0406 tx timeout
[  227.235543][ T8344] autofs: Unknown parameter 'SU��ɶj�f_��y1��+����zk|�*���˨0��'
[  227.244609][ T8343] 9p: Bad value for 'version'
[  227.260975][ T5890] usb 5-1: unable to get BOS descriptor or descriptor too short
[  227.269701][ T5890] usb 5-1: not running at top speed; connect to a high speed hub
[  227.280560][ T5890] usb 5-1: config 129 has an invalid interface number: 41 but max is 0
[  227.290199][ T5890] usb 5-1: config 129 has no interface number 0
[  227.296592][ T8326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  227.298192][ T5890] usb 5-1: config 129 interface 41 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D
[  227.317731][ T8326] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  227.329792][ T5925] usb 1-1: USB disconnect, device number 74
[  227.346533][ T5890] usb 5-1: config 129 interface 41 altsetting 250 endpoint 0x8D has invalid maxpacket 18502, setting to 64
[  227.360870][ T5890] usb 5-1: config 129 interface 41 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  227.378919][ T5890] usb 5-1: config 129 interface 41 has no altsetting 0
[  227.391845][ T5890] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0108, bcdDevice=14.50
[  227.401544][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.410028][ T5890] usb 5-1: Product: syz
[  227.414381][ T5890] usb 5-1: Manufacturer: syz
[  227.419631][ T5890] usb 5-1: SerialNumber: syz
[  227.448469][ T8337] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22
[  227.678175][ T5890] kvaser_usb 5-1:129.41: error -ENODEV: Cannot get usb endpoint(s)
[  227.706097][ T5890] usb 5-1: USB disconnect, device number 23
[  227.856879][ T6216] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[  228.006967][ T6216] usb 3-1: Using ep0 maxpacket: 32
[  228.014070][ T6216] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  228.025680][ T6216] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  228.035590][ T6216] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  228.046279][ T6216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.057702][ T6216] usb 3-1: config 0 descriptor??
[  228.136894][ T5890] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[  228.296851][ T5890] usb 1-1: Using ep0 maxpacket: 32
[  228.309500][ T5890] usb 1-1: config 0 has an invalid interface number: 246 but max is 0
[  228.330714][ T5890] usb 1-1: config 0 has no interface number 0
[  228.351617][ T5890] usb 1-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=1e.94
[  228.368098][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.392179][ T5890] usb 1-1: Product: syz
[  228.398954][ T5890] usb 1-1: Manufacturer: syz
[  228.403676][ T5890] usb 1-1: SerialNumber: syz
[  228.412481][ T5890] usb 1-1: config 0 descriptor??
[  228.428380][ T5890] as10x_usb: device has been detected
[  228.434779][ T5890] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e))
[  228.458534][ T5890] usb 1-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))...
[  228.486071][ T5890] as10x_usb: error during firmware upload part1
[  228.497671][ T5890] Registered device PCTV Systems picoStick (74e)
[  228.622429][ T5817] usb 1-1: USB disconnect, device number 75
[  228.692115][ T5817] Unregistered device PCTV Systems picoStick (74e)
[  228.698395][ T5817] as10x_usb: device has been disconnected
[  229.307185][ T5925] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  229.456859][ T5925] usb 5-1: Using ep0 maxpacket: 32
[  229.463983][ T5925] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  229.476203][ T5925] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  229.489714][ T5925] usb 5-1: New USB device found, idVendor=07c0, idProduct=1525, bcdDevice= 0.40
[  229.498326][   T30] audit: type=1326 audit(1768086652.935:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29bf18f749 code=0x7fc00000
[  229.500044][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.529154][ T5925] usb 5-1: Product: syz
[  229.533353][ T5925] usb 5-1: Manufacturer: syz
[  229.538165][ T5925] usb 5-1: SerialNumber: syz
[  229.545791][ T5817] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[  229.696935][ T5817] usb 1-1: Using ep0 maxpacket: 8
[  229.704319][ T5817] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  229.715365][ T5817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  229.726545][ T5817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  229.739915][ T5817] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  229.749402][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.757539][ T5817] usb 1-1: Product: syz
[  229.761770][ T5817] usb 1-1: Manufacturer: syz
[  229.766625][ T5817] usb 1-1: SerialNumber: syz
[  229.778300][ T5817] usb 1-1: config 0 descriptor??
[  229.873513][ T5925] usb 5-1: USB disconnect, device number 24
[  229.991864][ T8375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  230.000878][ T8375] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  230.010017][ T5817] usb 1-1: USB disconnect, device number 76
[  230.213199][ T8383] : renamed from dummy0 (while UP)
[  230.225310][ T8383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  230.236036][ T8383] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  230.656346][ T8389] netlink: 20 bytes leftover after parsing attributes in process `syz.0.717'.
[  230.687049][ T5817] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  230.695289][ T8389] netlink: 16 bytes leftover after parsing attributes in process `syz.0.717'.
[  230.841667][ T8397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  230.851184][ T8397] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  230.869281][ T5817] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  230.879855][ T5817] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  230.895188][ T5817] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  230.910747][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.919615][ T5817] usb 5-1: Product: syz
[  230.925144][ T5817] usb 5-1: Manufacturer: syz
[  230.930960][ T5817] usb 5-1: SerialNumber: syz
[  231.066916][ T5925] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  231.099118][ T6216] usbhid 3-1:0.0: can't add hid device: -71
[  231.108963][ T6216] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  231.128740][ T6216] usb 3-1: USB disconnect, device number 72
[  231.240525][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  231.257174][ T5925] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  231.266274][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.281375][ T5925] usb 1-1: config 0 descriptor??
[  231.379920][ T5817] cdc_ncm 5-1:1.0: bind() failure
[  231.413414][ T5817] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  231.465794][ T5817] cdc_ncm 5-1:1.1: bind() failure
[  231.493266][ T5817] usb 5-1: USB disconnect, device number 25
[  231.718356][ T5925] lenovo 0003:17EF:6047.000D: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0
[  231.814538][ T8414] netlink: 'syz.4.724': attribute type 1 has an invalid length.
[  231.837078][ T8414] netlink: 228 bytes leftover after parsing attributes in process `syz.4.724'.
[  231.897462][ T8414] KVM: debugfs: duplicate directory 8414-7
[  231.929108][ T8414] Dead loop on virtual device ip6_vti0, fix it urgently!
[  231.986787][ T8420] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  231.998058][   T59] Bluetooth: hci4: Frame reassembly failed (-84)
[  232.008377][   T59] Bluetooth: hci4: Frame reassembly failed (-84)
[  232.160657][ T8425] netlink: 60 bytes leftover after parsing attributes in process `syz.4.727'.
[  232.170465][ T8425] netlink: 60 bytes leftover after parsing attributes in process `syz.4.727'.
[  232.183398][ T8426] netlink: 60 bytes leftover after parsing attributes in process `syz.4.727'.
[  232.771621][ T5925] usb 1-1: USB disconnect, device number 77
[  232.909674][ T8422] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  232.919032][ T8422] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  232.925544][ T8422] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  232.937704][ T8422] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  232.944070][ T8422] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  232.951716][ T8422] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  232.959468][ T8422] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  232.968946][ T8422] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  233.646031][ T8455] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20001
[  233.679061][ T8455] syzkaller1: entered promiscuous mode
[  233.684762][ T8455] syzkaller1: entered allmulticast mode
[  234.018123][ T5823] Bluetooth: hci4: command 0x1003 tx timeout
[  234.027153][ T5830] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  234.177035][ T5830] Bluetooth: hci0: command 0x0406 tx timeout
[  234.292961][ T8481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  234.327351][ T8481] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  234.346678][ T8482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  234.375870][ T8482] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  234.636877][ T5891] usb 1-1: new full-speed USB device number 78 using dummy_hcd
[  234.658377][ T8120] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  234.809894][ T5891] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  234.825803][ T5891] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  234.836827][ T8120] usb 5-1: Using ep0 maxpacket: 32
[  234.842089][ T5891] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  234.843778][ T8120] usb 5-1: no configurations
[  234.856392][ T8120] usb 5-1: can't read configurations, error -22
[  234.862807][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  234.871959][ T5891] usb 1-1: SerialNumber: syz
[  234.909219][ T5891] usb 1-1: 0:2 : does not exist
[  234.977323][ T5830] Bluetooth: hci1: command 0x0406 tx timeout
[  234.977352][ T5826] Bluetooth: hci3: command 0x0406 tx timeout
[  234.990778][ T5823] Bluetooth: hci2: command 0x0c1a tx timeout
[  234.997339][ T8120] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  235.161323][ T8120] usb 5-1: Using ep0 maxpacket: 32
[  235.170552][ T5891] usb 1-1: USB disconnect, device number 78
[  235.184510][ T8120] usb 5-1: no configurations
[  235.200936][ T8120] usb 5-1: can't read configurations, error -22
[  235.215554][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  235.244563][ T8120] usb usb5-port1: attempt power cycle
[  235.569721][ T8514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  235.597284][ T8120] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  235.625792][ T8514] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  235.650952][ T8120] usb 5-1: Using ep0 maxpacket: 32
[  235.662679][ T8120] usb 5-1: no configurations
[  235.667566][ T8120] usb 5-1: can't read configurations, error -22
[  235.807059][ T8120] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  235.827615][ T8120] usb 5-1: Using ep0 maxpacket: 32
[  235.833400][ T8120] usb 5-1: no configurations
[  235.838109][ T8120] usb 5-1: can't read configurations, error -22
[  235.844661][ T8120] usb usb5-port1: unable to enumerate USB device
[  235.906906][ T5817] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[  235.936959][ T5890] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[  236.066980][ T5817] usb 3-1: Using ep0 maxpacket: 32
[  236.073844][ T5817] usb 3-1: config index 0 descriptor too short (expected 35577, got 27)
[  236.082652][ T5817] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  236.091474][ T5817] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92
[  236.097018][ T5890] usb 1-1: Using ep0 maxpacket: 32
[  236.101291][ T5817] usb 3-1: config 1 has no interface number 0
[  236.111893][ T5817] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  236.115279][ T5890] usb 1-1: config 0 has an invalid interface number: 215 but max is 0
[  236.122942][ T5817] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  236.123007][ T5817] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  236.135112][ T5890] usb 1-1: config 0 has no interface number 0
[  236.162636][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.182381][ T5817] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found
[  236.196484][ T5890] usb 1-1: New USB device found, idVendor=1608, idProduct=0301, bcdDevice=f1.24
[  236.214114][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.223653][ T5890] usb 1-1: Product: syz
[  236.230326][ T5890] usb 1-1: Manufacturer: syz
[  236.236114][ T5890] usb 1-1: SerialNumber: syz
[  236.245171][ T5890] usb 1-1: config 0 descriptor??
[  236.255614][ T5890] io_ti 1-1:0.215: required endpoints missing
[  236.411240][ T5817] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached
[  236.448532][ T8526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  236.460765][ T8526] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  236.461385][ T5890] usb 1-1: USB disconnect, device number 79
[  236.902199][ T5890] usb 3-1: USB disconnect, device number 73
[  236.912806][ T5890] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected
[  237.057257][ T5826] Bluetooth: hci1: command 0x0406 tx timeout
[  237.057737][ T5830] Bluetooth: hci3: command 0x0406 tx timeout
[  237.063650][ T5823] Bluetooth: hci2: command 0x0c1a tx timeout
[  237.180996][ T8535] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000
[  237.314046][ T8545] input: syz0 as /devices/virtual/input/input22
[  237.796968][    T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  237.957020][ T5890] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[  237.967496][    T9] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  237.977386][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.988825][    T9] usb 5-1: config 0 descriptor??
[  237.998026][    T9] gspca_main: sunplus-2.14.0 probing 055f:c420
[  238.096958][ T5890] usb 3-1: device descriptor read/64, error -71
[  238.146863][ T8120] usb 1-1: new full-speed USB device number 80 using dummy_hcd
[  238.301694][ T8120] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  238.311405][ T8120] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.319530][ T8120] usb 1-1: Product: syz
[  238.323769][ T8120] usb 1-1: Manufacturer: syz
[  238.328636][ T8120] usb 1-1: SerialNumber: syz
[  238.336297][ T8120] usb 1-1: config 0 descriptor??
[  238.347209][ T5890] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[  238.353455][ T8120] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  238.371057][ T8120] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  238.387677][ T8120] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19)
[  238.488078][ T5890] usb 3-1: device descriptor read/64, error -71
[  238.548396][ T8120] usb 1-1: USB disconnect, device number 80
[  238.599248][ T5890] usb usb3-port1: attempt power cycle
[  238.613302][ T8563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  238.623626][ T8563] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  238.651668][    T9] gspca_sunplus: reg_w_riv err -71
[  238.662026][    T9] sunplus 5-1:0.0: probe with driver sunplus failed with error -71
[  238.678623][    T9] usb 5-1: USB disconnect, device number 30
[  238.936897][ T5890] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[  238.957623][ T5890] usb 3-1: device descriptor read/8, error -71
[  239.046902][    T9] usb 5-1: new low-speed USB device number 31 using dummy_hcd
[  239.137029][ T5823] Bluetooth: hci2: command 0x0c1a tx timeout
[  239.196988][ T5890] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[  239.207424][    T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  239.214902][    T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  239.227915][    T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  239.240300][    T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  239.240592][ T5890] usb 3-1: device descriptor read/8, error -71
[  239.258320][    T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  239.270703][    T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  239.278521][    T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  239.290974][    T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  239.303789][    T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  239.315909][    T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  239.328671][    T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  239.336165][    T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  239.347366][    T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  239.359203][    T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  239.370551][    T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  239.382100][ T5890] usb usb3-port1: unable to enumerate USB device
[  239.391933][    T9] usb 5-1: string descriptor 0 read error: -22
[  239.398367][    T9] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  239.408385][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.426036][    T9] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  239.517725][ T8120] usb 1-1: new low-speed USB device number 81 using dummy_hcd
[  239.678794][    T9] usb 5-1: USB disconnect, device number 31
[  239.681391][ T8120] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  239.688312][ T8572] usb 5-1: Couldn't submit interrupt_out_urb -19
[  239.693230][ T8120] usb 1-1: config 0 has no interface number 0
[  239.705901][ T8120] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  239.724520][ T8120] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  239.734583][ T8120] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  239.746713][ T8120] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.763185][ T8120] usb 1-1: config 0 descriptor??
[  239.774537][ T8120] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  239.972771][    T9] usb 1-1: USB disconnect, device number 81
[  240.348015][ T8579] netlink: 60 bytes leftover after parsing attributes in process `syz.4.774'.
[  240.359425][ T8579] netlink: 60 bytes leftover after parsing attributes in process `syz.4.774'.
[  240.713742][ T8590] xt_l2tp: v2 sid > 0xffff: 1114112
[  241.016994][ T6216] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  241.106888][    T9] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[  241.117639][ T8120] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[  241.166900][ T6216] usb 5-1: Using ep0 maxpacket: 32
[  241.173668][ T6216] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  241.184964][ T6216] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  241.196944][ T6216] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  241.206125][ T6216] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  241.214534][ T6216] usb 5-1: Product: syz
[  241.219113][ T6216] usb 5-1: Manufacturer: syz
[  241.231713][ T6216] hub 5-1:4.0: USB hub found
[  241.259428][    T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  241.272337][    T9] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8
[  241.277482][ T8120] usb 3-1: Using ep0 maxpacket: 32
[  241.288262][ T8120] usb 3-1: no configurations
[  241.293063][ T8120] usb 3-1: can't read configurations, error -22
[  241.301405][    T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  241.310784][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.318929][    T9] usb 1-1: Product: syz
[  241.323167][    T9] usb 1-1: Manufacturer: syz
[  241.327863][    T9] usb 1-1: SerialNumber: syz
[  241.437028][ T8120] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[  241.445026][ T6216] hub 5-1:4.0: 2 ports detected
[  241.543272][ T8602] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  241.596957][ T8120] usb 3-1: Using ep0 maxpacket: 32
[  241.603066][ T8120] usb 3-1: no configurations
[  241.608075][ T8120] usb 3-1: can't read configurations, error -22
[  241.614976][ T8120] usb usb3-port1: attempt power cycle
[  241.753411][ T8602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.764196][ T8602] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  241.966945][ T8120] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[  241.987664][ T8120] usb 3-1: Using ep0 maxpacket: 32
[  241.993576][ T8120] usb 3-1: no configurations
[  241.998541][ T8120] usb 3-1: can't read configurations, error -22
[  242.126945][ T8120] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[  242.151471][ T8120] usb 3-1: Using ep0 maxpacket: 32
[  242.157609][ T8120] usb 3-1: no configurations
[  242.162306][ T8120] usb 3-1: can't read configurations, error -22
[  242.169008][ T8120] usb usb3-port1: unable to enumerate USB device
[  242.260129][    T9] cdc_ncm 1-1:1.0: SET_CRC_MODE failed
[  242.274870][    T9] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed
[  242.301529][    T9] cdc_ncm 1-1:1.0: bind() failure
[  242.310954][    T9] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  242.319521][    T9] cdc_ncm 1-1:1.1: bind() failure
[  242.329421][    T9] usb 1-1: USB disconnect, device number 82
[  242.652542][ T6216] hub 5-1:4.0: activate --> -90
[  242.987994][ T8612] tipc: Enabling of bearer <dth:v> rejected, media not registered
[  243.106308][   T13] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xf8
[  243.326871][ T6216] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[  243.476934][ T6216] usb 1-1: Using ep0 maxpacket: 8
[  243.483678][ T6216] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  243.495112][ T6216] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  243.505533][ T6216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.516355][ T6216] usb 1-1: config 0 descriptor??
[  243.730255][ T8614] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  243.740879][ T8614] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  243.753279][ T8614] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  243.763311][ T8614] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  243.775129][ T8614] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  243.785054][ T8614] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  243.795496][ T8614] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  243.806035][ T8614] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  243.815172][ T6216] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  243.834706][ T8614] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1)
[  244.078762][ T8120] hub 5-1:4.0: hub_ext_port_status failed (err = -32)
[  244.089645][ T8120] usb 5-1-port2: cannot warm reset (err = -32)
[  244.096939][ T8120] usb 5-1-port2: cannot warm reset (err = -32)
[  244.105397][ T8120] usb 5-1-port2: Cannot enable. Maybe the USB cable is bad?
[  244.115164][ T8120] usb 5-1-port2: cannot disable (err = -32)
[  244.145176][ T8592] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  244.209136][ T8120] usb 1-1: USB disconnect, device number 83
[  244.310560][    T9] usb 5-1: USB disconnect, device number 32
[  244.353738][ T8634] netlink: 92 bytes leftover after parsing attributes in process `syz.4.789'.
[  244.430950][ T8637] netlink: 60 bytes leftover after parsing attributes in process `syz.4.791'.
[  244.442033][ T8637] netlink: 60 bytes leftover after parsing attributes in process `syz.4.791'.
[  244.455178][ T8637] netlink: 'syz.4.791': attribute type 29 has an invalid length.
[  244.567038][    T9] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[  244.651620][ T8642] IPVS: set_ctl: invalid protocol: 98 255.255.255.255:20001
[  244.737384][    T9] usb 3-1: config index 0 descriptor too short (expected 64706, got 72)
[  244.756399][    T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  244.768055][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.776105][    T9] usb 3-1: Product: syz
[  244.780988][    T9] usb 3-1: Manufacturer: syz
[  244.785628][    T9] usb 3-1: SerialNumber: syz
[  244.816404][    T9] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  244.846614][ T5891] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  245.084449][    T9] usb 3-1: USB disconnect, device number 82
[  245.466869][ T5925] usb 1-1: new full-speed USB device number 84 using dummy_hcd
[  245.625482][ T5925] usb 1-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config
[  245.639244][ T5925] usb 1-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e
[  245.649619][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.658965][ T5925] usb 1-1: Product: syz
[  245.663994][ T5925] usb 1-1: Manufacturer: syz
[  245.670202][ T5925] usb 1-1: SerialNumber: syz
[  245.687426][ T5925] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state.
[  245.709352][ T5925] dvb-usb: bulk message failed: -22 (3/0)
[  245.731907][ T5925] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  245.752600][ T5925] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19)
[  245.762057][ T5925] dvb_usb_umt_010 1-1:54.0: probe with driver dvb_usb_umt_010 failed with error -22
[  245.884557][ T8659] netlink: 'syz.0.798': attribute type 17 has an invalid length.
[  245.907852][ T8659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  245.935441][ T8659] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  245.944545][ T5891] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  245.953656][ T5891] ath9k_htc: Failed to initialize the device
[  245.971059][ T5817] usb 1-1: USB disconnect, device number 84
[  245.971619][    T9] usb 3-1: ath9k_htc: USB layer deinitialized
[  246.258059][ T5925] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  246.417186][    T9] usb 3-1: new low-speed USB device number 83 using dummy_hcd
[  246.424790][ T5925] usb 5-1: Using ep0 maxpacket: 32
[  246.432539][ T5925] usb 5-1: config 11 has an invalid interface number: 65 but max is 0
[  246.441292][ T5925] usb 5-1: config 11 has no interface number 0
[  246.447556][ T5925] usb 5-1: config 11 interface 65 has no altsetting 0
[  246.454345][ T5925] usb 5-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=a8.06
[  246.463563][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.587060][    T9] usb 3-1: Invalid ep0 maxpacket: 32
[  246.684348][ T5925] usb 5-1: string descriptor 0 read error: -71
[  246.709688][ T5925] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a
[  246.721100][    T9] usb 3-1: new low-speed USB device number 84 using dummy_hcd
[  246.730729][ T5925] gspca_sn9c20x: Write register 1000 failed -71
[  246.739438][ T5925] gspca_sn9c20x: Device initialization failed
[  246.745620][ T5925] gspca_sn9c20x 5-1:11.65: probe with driver gspca_sn9c20x failed with error -71
[  246.766873][ T5925] usb 5-1: USB disconnect, device number 33
[  246.886896][    T9] usb 3-1: Invalid ep0 maxpacket: 32
[  246.900196][    T9] usb usb3-port1: attempt power cycle
[  247.146890][ T5925] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[  247.236943][    T9] usb 3-1: new low-speed USB device number 85 using dummy_hcd
[  247.257559][    T9] usb 3-1: Invalid ep0 maxpacket: 32
[  247.305818][ T5925] usb 1-1: config 0 has an invalid interface number: 50 but max is 0
[  247.321942][ T5925] usb 1-1: config 0 has no interface number 0
[  247.332393][ T5925] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  247.334168][ T8684] netlink: 14556 bytes leftover after parsing attributes in process `syz.4.806'.
[  247.352034][ T5925] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  247.362489][ T8684] netlink: 14556 bytes leftover after parsing attributes in process `syz.4.806'.
[  247.362771][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.381130][ T5925] usb 1-1: Product: syz
[  247.385345][ T5925] usb 1-1: Manufacturer: syz
[  247.390277][    T9] usb 3-1: new low-speed USB device number 86 using dummy_hcd
[  247.398627][ T5925] usb 1-1: SerialNumber: syz
[  247.406350][ T5925] usb 1-1: config 0 descriptor??
[  247.422780][ T5925] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0
[  247.431555][    T9] usb 3-1: Invalid ep0 maxpacket: 32
[  247.439855][    T9] usb usb3-port1: unable to enumerate USB device
[  247.629726][ T8120] usb 1-1: USB disconnect, device number 85
[  247.645809][ T8120] yurex 1-1:0.50: USB YUREX #0 now disconnected
[  247.682696][ T8693] Bluetooth: MGMT ver 1.23
[  247.926860][    T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  248.079194][    T9] usb 5-1: config 1 has an invalid interface number: 7 but max is 0
[  248.087265][    T9] usb 5-1: config 1 has no interface number 0
[  248.093507][    T9] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0xB has invalid maxpacket 64
[  248.103357][    T9] usb 5-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  248.118276][    T9] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  248.127450][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.135464][    T9] usb 5-1: Product: syz
[  248.139831][    T9] usb 5-1: Manufacturer: syz
[  248.144455][    T9] usb 5-1: SerialNumber: syz
[  248.154699][ T8693] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  248.167260][ T8693] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  248.180223][    T9] usb 5-1: Expected 3 endpoints, found: 2
[  248.378661][ T6216] usb 5-1: USB disconnect, device number 34
[  248.516942][ T5817] usb 1-1: new full-speed USB device number 86 using dummy_hcd
[  248.680513][ T5817] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  248.691475][ T5817] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  248.703201][ T5817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 64
[  248.714214][ T5817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  248.725171][ T5817] usb 1-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  248.740638][ T5817] usb 1-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3
[  248.749795][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.757845][ T5817] usb 1-1: Product: syz
[  248.762036][ T5817] usb 1-1: Manufacturer: syz
[  248.766648][ T5817] usb 1-1: SerialNumber: syz
[  248.774093][ T5817] usb 1-1: config 0 descriptor??
[  248.780223][ T8700] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22
[  248.790620][ T5817] iuu_phoenix 1-1:0.0: iuu_phoenix converter detected
[  248.800880][ T5817] usb 1-1: iuu_phoenix converter now attached to ttyUSB0
[  248.993331][ T6216] usb 1-1: USB disconnect, device number 86
[  249.019283][ T6216] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0
[  249.034423][ T6216] iuu_phoenix 1-1:0.0: device disconnected
[  249.458787][ T5925] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  249.596898][ T5925] usb 5-1: device descriptor read/64, error -71
[  249.627121][    T9] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[  249.781061][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  249.793413][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  249.803982][    T9] usb 3-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00
[  249.813360][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.824980][    T9] usb 3-1: config 0 descriptor??
[  249.846912][ T5925] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  249.996871][ T5925] usb 5-1: device descriptor read/64, error -71
[  250.117381][ T5925] usb usb5-port1: attempt power cycle
[  250.243890][    T9] hid_parser_main: 344 callbacks suppressed
[  250.243915][    T9] aquacomputer_d5next 0003:0C70:F003.000E: unknown main item tag 0x0
[  250.275791][    T9] aquacomputer_d5next 0003:0C70:F003.000E: hidraw0: USB HID v0.00 Device [HID 0c70:f003] on usb-dummy_hcd.2-1/input0
[  250.442623][    T9] usb 3-1: USB disconnect, device number 87
[  250.457250][ T5925] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  250.487609][ T5925] usb 5-1: device descriptor read/8, error -71
[  250.536887][ T8120] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[  250.698790][ T8120] usb 1-1: config 0 has an invalid interface number: 120 but max is 0
[  250.707142][ T8120] usb 1-1: config 0 has no interface number 0
[  250.713295][ T8120] usb 1-1: config 0 interface 120 has no altsetting 0
[  250.720158][ T8120] usb 1-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=d6.f3
[  250.727160][ T5925] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  250.729706][ T8120] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.749673][ T8120] usb 1-1: config 0 descriptor??
[  250.767542][ T5925] usb 5-1: device descriptor read/8, error -71
[  250.877747][ T5925] usb usb5-port1: unable to enumerate USB device
[  250.960254][ T8120] usb 1-1: string descriptor 0 read error: -71
[  250.980850][ T8120] cytherm 1-1:0.120: Cypress thermometer device now attached
[  250.997525][ T8120] usb 1-1: USB disconnect, device number 87
[  251.006191][ T8120] cytherm 1-1:0.120: Cypress thermometer now disconnected
[  251.956953][ T8120] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[  252.106841][ T8120] usb 1-1: Using ep0 maxpacket: 16
[  252.113609][ T8120] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  252.124120][ T8120] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  252.135538][ T8120] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  252.144873][ T8120] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.153059][ T8120] usb 1-1: Product: syz
[  252.157461][ T8120] usb 1-1: Manufacturer: syz
[  252.162073][ T8120] usb 1-1: SerialNumber: syz
[  252.606928][    T9] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  252.766994][    T9] usb 5-1: Using ep0 maxpacket: 32
[  252.774450][    T9] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  252.783912][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.795401][    T9] usb 5-1: config 0 descriptor??
[  253.008182][    T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  253.018453][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  253.029795][    T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  253.037211][    T9] usb 5-1: media controller created
[  253.058487][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  253.325768][ T5890] usb 4-1: USB disconnect, device number 29
[  253.479936][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  253.490830][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  253.499138][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  253.509296][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  253.517675][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  253.634651][ T8752] pim6reg: entered allmulticast mode
[  253.657557][ T8752] team0: entered allmulticast mode
[  253.665688][ T8752] team_slave_0: entered allmulticast mode
[  253.671924][ T8752] team_slave_1: entered allmulticast mode
[  253.685472][ T8752] team0: left allmulticast mode
[  253.691278][ T8752] team_slave_0: left allmulticast mode
[  253.699238][ T8752] team_slave_1: left allmulticast mode
[  253.705160][ T8752] pim6reg: left allmulticast mode
[  253.712320][ T8767] binder: 8765:8767 ioctl c0306201 2000000001c0 returned -14
[  253.957363][    T9] az6027: usb out operation failed. (-71)
[  253.968750][    T9] stb0899_attach: Driver disabled by Kconfig
[  253.982608][    T9] az6027: no front-end attached
[  253.982608][    T9] 
[  253.997945][    T9] az6027: usb out operation failed. (-71)
[  254.010429][    T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  254.033084][    T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input23
[  254.051162][    T9] dvb-usb: schedule remote query interval to 400 msecs.
[  254.058338][    T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  254.071587][    T9] usb 5-1: USB disconnect, device number 39
[  254.159883][ T8763] chnl_net:caif_netlink_parms(): no params data found
[  254.191354][    T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  254.360162][ T8763] bridge0: port 1(bridge_slave_0) entered blocking state
[  254.367581][ T8763] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.375129][ T8763] bridge_slave_0: entered allmulticast mode
[  254.384279][ T8763] bridge_slave_0: entered promiscuous mode
[  254.394239][ T8763] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.401603][ T8763] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.409024][ T8763] bridge_slave_1: entered allmulticast mode
[  254.417249][ T8763] bridge_slave_1: entered promiscuous mode
[  254.472189][ T8763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  254.492867][ T8763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  254.594582][ T8763] team0: Port device team_slave_0 added
[  254.605147][ T8763] team0: Port device team_slave_1 added
[  254.679214][ T8120] usb 1-1: 0:2 : does not exist
[  254.684220][ T8120] usb 1-1: unit 6 not found!
[  254.698312][ T8763] batman_adv: batadv0: Adding interface: batadv_slave_0
[  254.705360][ T8763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  254.774691][ T8763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  254.791968][ T8120] usb 1-1: USB disconnect, device number 88
[  254.802401][ T8763] batman_adv: batadv0: Adding interface: batadv_slave_1
[  254.830269][ T8763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  254.860112][ T8763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  254.877538][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  255.149720][ T8763] hsr_slave_0: entered promiscuous mode
[  255.156691][ T8763] hsr_slave_1: entered promiscuous mode
[  255.168446][ T8763] debugfs: 'hsr0' already exists in 'hsr'
[  255.174226][ T8763] Cannot create hsr debugfs directory
[  255.417320][ T5817] usb 1-1: new high-speed USB device number 89 using dummy_hcd
[  255.576928][ T5817] usb 1-1: Using ep0 maxpacket: 32
[  255.586228][ T5817] usb 1-1: config 0 has an invalid interface number: 197 but max is 0
[  255.626823][ T5817] usb 1-1: config 0 has no interface number 0
[  255.627720][ T5826] Bluetooth: hci4: command tx timeout
[  255.632997][ T5817] usb 1-1: config 0 interface 197 has no altsetting 0
[  255.649704][ T8763] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  255.671579][ T5817] usb 1-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=32.65
[  255.687920][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.700249][ T8763] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  255.706420][ T5817] usb 1-1: Product: syz
[  255.711626][ T5817] usb 1-1: Manufacturer: syz
[  255.716253][ T5817] usb 1-1: SerialNumber: syz
[  255.730547][ T8763] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  255.738638][ T5817] usb 1-1: config 0 descriptor??
[  255.753561][ T5817] gspca_main: etoms-2.14.0 probing 102c:6151
[  255.764497][ T8763] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  255.959908][ T8787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  255.975845][ T8787] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  256.069543][ T5817] usb 1-1: USB disconnect, device number 89
[  256.111646][ T8763] 8021q: adding VLAN 0 to HW filter on device bond0
[  256.136090][ T8763] 8021q: adding VLAN 0 to HW filter on device team0
[  256.165251][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  256.172500][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  256.194574][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  256.201826][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  256.247035][ T8120] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[  256.409445][ T8120] usb 3-1: config 0 has an invalid interface number: 209 but max is 0
[  256.426874][ T8120] usb 3-1: config 0 has no interface number 0
[  256.439364][ T8120] usb 3-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=53.a6
[  256.459678][ T8120] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.491877][ T8120] usb 3-1: config 0 descriptor??
[  256.532032][ T8120] ftdi_sio 3-1:0.209: FTDI USB Serial Device converter detected
[  256.568253][ T8120] ftdi_sio ttyUSB0: unknown device type: 0x53a6
[  256.695258][ T8763] 8021q: adding VLAN 0 to HW filter on device batadv0
[  256.926240][ T5925] usb 1-1: new high-speed USB device number 90 using dummy_hcd
[  257.082577][ T8763] veth0_vlan: entered promiscuous mode
[  257.109055][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  257.120287][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  257.135548][ T8763] veth1_vlan: entered promiscuous mode
[  257.145013][ T5925] usb 1-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba
[  257.178887][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.210445][ T8763] veth0_macvtap: entered promiscuous mode
[  257.219671][ T5925] usb 1-1: config 0 descriptor??
[  257.280039][ T8763] veth1_macvtap: entered promiscuous mode
[  257.320528][ T8763] batman_adv: batadv0: Interface activated: batadv_slave_0
[  257.337187][ T8763] batman_adv: batadv0: Interface activated: batadv_slave_1
[  257.363118][ T3540] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  257.374444][ T3540] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  257.401750][ T3540] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  257.411840][ T3540] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  257.539221][  T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  257.547304][  T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  257.609788][  T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  257.624841][  T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  257.653267][ T5925] stadia 0003:18D1:9400.000F: unknown main item tag 0x0
[  257.662532][ T5925] stadia 0003:18D1:9400.000F: unknown main item tag 0x0
[  257.682172][ T5925] stadia 0003:18D1:9400.000F: unknown main item tag 0x0
[  257.699493][ T5826] Bluetooth: hci4: command tx timeout
[  257.708574][ T5925] stadia 0003:18D1:9400.000F: unknown main item tag 0x0
[  257.715693][ T5925] stadia 0003:18D1:9400.000F: unknown main item tag 0x0
[  257.749175][ T5925] stadia 0003:18D1:9400.000F: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.0-1/input0
[  257.787381][ T5925] stadia 0003:18D1:9400.000F: no inputs found
[  257.793531][ T5925] stadia 0003:18D1:9400.000F: force feedback init failed
[  257.854440][ T8806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  257.865642][ T8806] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  257.878897][ T8806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  257.890246][ T8806] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  257.902054][ T5925] usb 1-1: USB disconnect, device number 90
[  257.953759][ T8813] fido_id[8813]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  258.511564][ T8819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.838'.
[  258.979059][ T5877] usb 3-1: USB disconnect, device number 88
[  258.999632][ T5877] ftdi_sio 3-1:0.209: device disconnected
[  259.114672][ T8821] ------------[ cut here ]------------
[  259.114914][ T8821] kernel BUG at mm/swap_cgroup.c:78!
[  259.114968][ T8821] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  259.114996][ T8821] CPU: 1 UID: 0 PID: 8821 Comm: syz.0.839 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  259.115027][ T8821] Tainted: [L]=SOFTLOCKUP
[  259.115037][ T8821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  259.115051][ T8821] RIP: 0010:swap_cgroup_record+0x19c/0x1c0
[  259.115090][ T8821] Code: 02 e9 6d ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 35 ff ff ff 4c 89 f7 e8 ff 79 f6 ff e9 28 ff ff ff e8 55 a9 8f ff 90 <0f> 0b e8 4d a9 8f ff 4c 89 f7 48 c7 c6 60 f7 98 8b e8 0e b9 f6 fe
[  259.115111][ T8821] RSP: 0018:ffffc90005246700 EFLAGS: 00010083
[  259.115135][ T8821] RAX: ffffffff8231516b RBX: 0000000000000048 RCX: 0000000000080000
[  259.115152][ T8821] RDX: ffffc90004a82000 RSI: 0000000000020f9a RDI: 0000000000020f9b
[  259.115168][ T8821] RBP: 0000000000000005 R08: 0000000000000003 R09: 0000000000000004
[  259.115182][ T8821] R10: dffffc0000000000 R11: fffff52000a48cd0 R12: dffffc0000000000
[  259.115200][ T8821] R13: 0000000000000000 R14: ffffc90004011000 R15: 0000000000000003
[  259.115216][ T8821] FS:  00007ff2ed3836c0(0000) GS:ffff888125abb000(0000) knlGS:0000000000000000
[  259.115237][ T8821] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  259.115253][ T8821] CR2: 00007fd3d0650f98 CR3: 0000000079ea8000 CR4: 00000000003526f0
[  259.115274][ T8821] Call Trace:
[  259.115282][ T8821]  <TASK>
[  259.115294][ T8821]  memcg1_swapout+0x2fa/0x830
[  259.115332][ T8821]  __remove_mapping+0xac5/0xe30
[  259.115369][ T8821]  shrink_folio_list+0x28a8/0x5200
[  259.115414][ T8821]  ? __pfx_shrink_folio_list+0x10/0x10
[  259.115439][ T8821]  ? rcu_is_watching+0x15/0xb0
[  259.115461][ T8821]  ? trace_sched_exit_tp+0x36/0xf0
[  259.115491][ T8821]  ? __schedule+0x1503/0x5040
[  259.115511][ T8821]  ? __lock_acquire+0x6b6/0x2cf0
[  259.115566][ T8821]  ? css_rstat_updated+0x239/0x520
[  259.115597][ T8821]  ? __pfx_css_rstat_updated+0x10/0x10
[  259.115630][ T8821]  reclaim_folio_list+0xeb/0x4e0
[  259.115655][ T8821]  ? __lock_acquire+0x6b6/0x2cf0
[  259.115696][ T8821]  ? __pfx_reclaim_folio_list+0x10/0x10
[  259.115721][ T8821]  ? lru_gen_update_size+0x818/0xd20
[  259.115755][ T8821]  ? __mod_zone_page_state+0xd7/0x140
[  259.115788][ T8821]  ? lru_gen_del_folio+0x359/0x540
[  259.115821][ T8821]  reclaim_pages+0x454/0x520
[  259.115850][ T8821]  ? __pfx_reclaim_pages+0x10/0x10
[  259.115877][ T8821]  ? madvise_cold_or_pageout_pte_range+0x1977/0x1ce0
[  259.115905][ T8821]  madvise_cold_or_pageout_pte_range+0x19a0/0x1ce0
[  259.115940][ T8821]  ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10
[  259.115975][ T8821]  walk_pgd_range+0x1037/0x1d30
[  259.116021][ T8821]  ? __pfx_walk_pgd_range+0x10/0x10
[  259.116054][ T8821]  __walk_page_range+0x14c/0x710
[  259.116084][ T8821]  ? __pfx_sched_balance_rq+0x10/0x10
[  259.116122][ T8821]  walk_page_range_vma_unsafe+0x34c/0x400
[  259.116154][ T8821]  ? __pfx_walk_page_range_vma_unsafe+0x10/0x10
[  259.116185][ T8821]  ? mlock_drain_local+0x79/0x480
[  259.116210][ T8821]  ? walk_page_range_vma+0x6b/0x90
[  259.116239][ T8821]  madvise_vma_behavior+0x3132/0x4170
[  259.116268][ T8821]  ? __pfx_madvise_vma_behavior+0x10/0x10
[  259.116293][ T8821]  ? __lock_acquire+0x6b6/0x2cf0
[  259.116328][ T8821]  ? pick_next_task_fair+0x1bb4/0x1e00
[  259.116366][ T8821]  ? finish_task_switch+0x162/0x940
[  259.116395][ T8821]  ? lock_acquire+0x107/0x340
[  259.116434][ T8821]  ? finish_task_switch+0x23d/0x940
[  259.116463][ T8821]  ? lockdep_hardirqs_on+0x7b/0x110
[  259.116486][ T8821]  ? finish_task_switch+0x23d/0x940
[  259.116516][ T8821]  ? rcu_is_watching+0x15/0xb0
[  259.116538][ T8821]  ? trace_sched_exit_tp+0x36/0xf0
[  259.116568][ T8821]  ? __lock_acquire+0x6b6/0x2cf0
[  259.116610][ T8821]  ? mas_prev_slot+0xb31/0xbb0
[  259.116640][ T8821]  ? find_vma_prev+0xe3/0x150
[  259.116668][ T8821]  ? __pfx_find_vma_prev+0x10/0x10
[  259.116697][ T8821]  ? futex_unqueue+0x22/0x240
[  259.116730][ T8821]  ? __futex_wait+0x34a/0x3d0
[  259.116756][ T8821]  madvise_walk_vmas+0x575/0xaf0
[  259.116777][ T8821]  ? __lock_acquire+0x6b6/0x2cf0
[  259.116814][ T8821]  ? __pfx_madvise_walk_vmas+0x10/0x10
[  259.116838][ T8821]  ? blk_start_plug+0x6f/0x1b0
[  259.116872][ T8821]  madvise_do_behavior+0x38e/0x550
[  259.116898][ T8821]  ? __pfx_madvise_do_behavior+0x10/0x10
[  259.116926][ T8821]  ? down_read+0x274/0x2e0
[  259.116951][ T8821]  ? madvise_lock+0x146/0x2f0
[  259.116976][ T8821]  do_madvise+0x1bc/0x270
[  259.116998][ T8821]  ? __pfx_do_madvise+0x10/0x10
[  259.117024][ T8821]  ? __se_sys_futex+0x36f/0x400
[  259.117062][ T8821]  ? rcu_is_watching+0x15/0xb0
[  259.117087][ T8821]  __x64_sys_madvise+0xa7/0xc0
[  259.117111][ T8821]  do_syscall_64+0xec/0xf80
[  259.117135][ T8821]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.117158][ T8821]  ? trace_irq_disable+0x37/0x100
[  259.117184][ T8821]  ? clear_bhb_loop+0x40/0x90
[  259.117210][ T8821]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.117233][ T8821] RIP: 0033:0x7ff2ec58f749
[  259.117253][ T8821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  259.117274][ T8821] RSP: 002b:00007ff2ed383038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  259.117299][ T8821] RAX: ffffffffffffffda RBX: 00007ff2ec7e5fa0 RCX: 00007ff2ec58f749
[  259.117317][ T8821] RDX: 0000000000000015 RSI: 0000000000600000 RDI: 0000200000000000
[  259.117332][ T8821] RBP: 00007ff2ec613f91 R08: 0000000000000000 R09: 0000000000000000
[  259.117356][ T8821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  259.117371][ T8821] R13: 00007ff2ec7e6038 R14: 00007ff2ec7e5fa0 R15: 00007ffd078a5fd8
[  259.117398][ T8821]  </TASK>
[  259.117406][ T8821] Modules linked in:
[  259.117425][ T8821] ---[ end trace 0000000000000000 ]---
[  259.117445][ T8821] RIP: 0010:swap_cgroup_record+0x19c/0x1c0
[  259.117485][ T8821] Code: 02 e9 6d ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 35 ff ff ff 4c 89 f7 e8 ff 79 f6 ff e9 28 ff ff ff e8 55 a9 8f ff 90 <0f> 0b e8 4d a9 8f ff 4c 89 f7 48 c7 c6 60 f7 98 8b e8 0e b9 f6 fe
[  259.117506][ T8821] RSP: 0018:ffffc90005246700 EFLAGS: 00010083
[  259.117526][ T8821] RAX: ffffffff8231516b RBX: 0000000000000048 RCX: 0000000000080000
[  259.117543][ T8821] RDX: ffffc90004a82000 RSI: 0000000000020f9a RDI: 0000000000020f9b
[  259.117560][ T8821] RBP: 0000000000000005 R08: 0000000000000003 R09: 0000000000000004
[  259.117574][ T8821] R10: dffffc0000000000 R11: fffff52000a48cd0 R12: dffffc0000000000
[  259.117592][ T8821] R13: 0000000000000000 R14: ffffc90004011000 R15: 0000000000000003
[  259.117608][ T8821] FS:  00007ff2ed3836c0(0000) GS:ffff888125abb000(0000) knlGS:0000000000000000
[  259.117628][ T8821] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  259.117644][ T8821] CR2: 00007fd3d0650f98 CR3: 0000000079ea8000 CR4: 00000000003526f0
[  259.117667][ T8821] Kernel panic - not syncing: Fatal exception
[  259.118281][ T8821] Kernel Offset: disabled